How to Extract Installed certificates

FortiNAC

NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.

Article Id 328109

Description

This article describes how to extract installed SSL certs for tomcat/portal/agent.

Scope

FortiNAC-C, FortiNAC-F.

Solution

Export the certificate from the Java Keystore and import it into a PKCS #12 Keystore:

keytool -importkeystore -srckeystore /bsc/campusMgr/.keystore -destkeystore keystore.p12 -deststoretype PKCS12 -srcalias <tomcat/portal/agent> -deststorepass <password> -destkeypass <password>

Export the certificate from the PKCS12 Keystore:

openssl pkcs12 -in keystore.p12 -nokeys -out <Cert-File>

Export the private key from the PKCS12 Keystore:

openssl pkcs12 -in keystore.p12 -nodes -nocerts -out <PrivKey-File>

Check and copy the certs and keys created in a notepad file on the local machine and save as .pem and .key:

cat <Cert-File/PrivKey-File>

Upload the certs to the correct target using the FortiNAC GUI.

319

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to Extract Installed certificates

You are leaving our website