Troubleshooting Tip: How to re-generate default ADOM CA certificate after being deleted

[tnesh]

Description	This article describes how to re-generate the default ADOM CA certificate using the CLI command. This will be useful when the default ADOM CA certificate is deleted and it is needed again for certificate generation.
Scope	FortiManager v7.4.3 and above.
Solution	Note: If the old certificate is still in the newADOM, a new CA certificate cannot be created and replaced with the old one. As a first step, the old CA certificate needs to be deleted. Run the following CLI command to re-generate the default ADOM CA certificate: diagnose cdb manual-fix adom <adom-name> generate-adom-ca Sample CLI output: FMG # diagnose cdb manual-fix adom newADOM generate-adom-ca Changes will be made to the database, however it is recommended to perform a backup first. Do you want to continue? (y/n)y Upgrading: Re-generate ADOM CA Database upgrade complete. FMG #  Once completed, a new default ADOM CA certificate will be generated under FortiManager -> Policy & Objects -> Advanced -> CA Certificates.