| Description |
This article describes how to fix a working FortiClient EMS certificate error after upgrading the FortiGate firmware. |
| Scope |
FortiGate v6.x.x and v7.x.x. |
| Solution |
It is not common for a FortiGate firmware upgrade to cause a FortiClient EMS connectivity issue, where the FortiClient EMS is accessible, but the 'EMS certificate not trusted' error occurs.
In that scenario, use the command to 'unverify' the certificate.
config endpoint-control fctems show full execute fctems unverify <FortiClient EMS>
See the example screenshot below:
Verify the FortiClient EMS again:
execute fctems verify <FortiClient EMS>
After the verification, the new certificate request will be visible to use on the CLI. Press 'Y' for yes.
To check the certificate status: execute fctems is-verified <Forticlient EMS> |
