Created on 
    
	
		
		
		10-28-2024
	
		
		10:47 PM
	
	
	
	
	
	
	
	
	
	
	
	
	
	
  Edited on 
    
	
		
		
		08-11-2025
	
		
		02:18 AM
	
	
	
	
	
	
	
	
	
	
	
	
	
	
 By  
				
		 Anthony_E
		
			Anthony_E
		
		
		
		
		
		
		
		
	
			 
		
| Description | This article describes how the built-in certificates in FortiProxy can be renewed | 
| Scope | FortiProxy. | 
| Solution | To renew the built-in certificates on FortiProxy on v2.0.X, refer to the commands below: 
 Fortinet_CA_SSL: 
 execute certificate local generate default-ssl-ca 
 Fortinet_CA_Untrusted: 
 
 Renew all SSL Key Certificates: 
 execute certificate local generate default-ssl-key-certs 
 Fortinet_SSL: 
 execute certificate local generate default-ssl-serv-key 
 To renew the built-in certificates on FortiProxy on v7.0 and above, refer to the commands below. 
 Fortinet_CA_SSL: 
 execute vpn certificate local generate default-ssl-ca 
 Fortinet_CA_Untrusted: 
 execute vpn certificate local generate default-ssl-ca-untrusted 
 Renew all SSL Key Certificates: 
 execute vpn certificate local generate default-ssl-key-certs 
 Fortinet_SSL: 
 execute vpn certificate local generate default-ssl-serv-key 
 Fortinet_GUI_Server: 
 execute vpn certificate local generate default-gui-mgmt-cert 
 Note: Only the built-in certificates can be renewed using the commands above. Externally imported certificates will need to be renewed manually. | 
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.