FortiNAC-F
FortiNAC-F is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks. For legacy FortiNAC articles prior to FortiNAC-F 7.2, see FortiNAC.
Hawada1
Staff & Editor
Staff & Editor
Article Id 416757
Description This article describes how to verify the SSL certificates imported into FortiNAC using the CLI.
Scope FortiNAC-F v7.6.x.
Solution

The command below will display the detailed information of the SSL certificates imported into FortiNAC using the CLI:

FortiNAC # diagnose system server-certificates show all
Press "TAB" to display all the options


Admin UI                            
Local RADIUS Server (EAP) [radius]  
Local RADIUS Server (RadSec)        
Persistent Agent                    
Portal                              
Remote API [remote_api]

 

fnac2 # diagnose system server-certificates show all 'Local RADIUS Server (EAP) [radius]' --detail 
---------------------------------------------------
Local RADIUS Server (EAP) [radius]
---------------------------------------------------

 

Type:               : X.509
Version:            : 3
Serial Number:      : [...]
Signature Algorithm: : SHA256withRSA
Issuer:             : CN=radius
Valid From:         : 7/17/25, 4:52 AM
Valid To:           : 7/17/35, 4:52 AM
Subject:            : CN=radius
OCSP URI:           :
CRL URIs            : [...]
SHA1 Fingerprint:   : [...]
Public Key:         : Sun RSA public key, 2048 bits
  params: null

 

As well as trusted certificates:

 

FortiNAC # diagnose system trusted-certificates show all 
Press "TAB" to display all the options


General Trusted CA              
Persistent Agent Cert Check     
RADIUS Endpoint Trust (RadSec)  
RADIUS Endpoint Trust [radius]  
WinRM Trusted CA Chain

FortiNAC # diagnose system trusted-certificates show all 'RADIUS Endpoint Trust [radius]' --details
---------------------------------------------------
RADIUS Endpoint Trust [radius]
---------------------------------------------------

Type: : X.509
Version: : 3
Serial Number: : [...]
Signature Algorithm: : SHA256withRSA
Issuer: : CN=radius
Valid From: : 7/21/25, 4:40 AM
Valid To: : 7/21/35, 4:40 AM
Subject: : CN=radius
OCSP URI: :
CRL URIs : []
SHA1 Fingerprint: : [...]
Public Key: : Sun RSA public key, 2048 bits
params: null
modulus: [...]
public exponent: 65537
Usage: :
Extended Usage: :

 

Related document:

Diagnose commands