Technical Tip: How to export an unencrypted private key and certificate installed in FortiWeb

[kmak]

Description	This article describes how to export the unencrypted private key and certificate installed in FortiWeb.
Scope	FortiWeb.
Solution	Prerequisites: SSH CLI access is enabled in FortiWeb. Account has the privilege to enable backend-shell access in FortiWeb. Backend Shell access is no longer available for v7.4.1 or higher, meaning the method is not applicable for FortiWeb firmware version v7.4.1 or above. Log in to the FortiWeb GUI and check for the certificate name.    Log in to the FortiWeb SSH CLI and enable the backend shell access and user. Open a new FortiWeb SSH CLI console and log in using the backend shell username and password. In the backend shell console, access the directory where the SSL certificate is stored (/data/etc/cert/local/root). Use commands like 'cat' or 'vi' to print or open the private key and certificate files. Private key example: Certificate example: Copy and paste the key and certificate into two separate files with proper naming conventions and valid file extensions. Private key example: Certificate example: Related document: Secure connections (SSL/TLS). Note:  In recent versions, the shell access has been completely removed for security reasons and is no longer available. Instead, it is possible to use the following CLI command to obtain the backup of the certificates. execute backup cert-config <ftp|sftp|tftp> <filename_str> <ip> <Enter>|<passwd> For reference and additional details, see this document: backup cert-config.