Exporting certificate and private key

[Yngve0]

InFortiGateâ„¢ Certificate Management User Guide Version 4.0 it say:

Connect to the FortiGate unit through the CLI.
 Note: As an alternative, you can back up and restore the entire FortiGate configuration
 through the System > Maintenance page of the web-based manager. The backup file is
 created in a FortiGate-proprietary format. For more information, see the “System
 Maintenance” chapter of the FortiGate Administration Guide.
 Using certificates to verify identity Backing up and restoring local certificates
 FortiGateâ„¢ Certificate Management User Guide Version 4.0
 01-30005-0182-20071005 17
 2 Type the following command:
 execute vpn certificate key export <cert_name> <exp_filename>
 <tftp_ip> <password>
 where:
 • <cert_name> is the name of the server certificate; typing ? displays a list of
 installed server certificates.
 • <exp_filename> is a name for the output file.
 • <tftp_ip> is the IP address assigned to the TFTP server host interface.
 • <password> is a password that will need to be entered later to import the
 PKCS12 file.

Unfortunately; " key" is aloowed syntax on my box (fg200@v4.0.3,build0106,090616) with vdom activated, only accepted syntax is:

 fortigate (global) # execute vpn certificate
 ca        ca
 crl       crl
 local     local
 remote    remote
 

How to export certicate with private key?

[abelio]

humm.. it seems a typo in the doc try:

 exec vpn certificate local export tftp <certificate name>  <exported_certificate.name> <IP_TFTP_server>
 

[Yngve0]

humm.. it seems a typo in the doc try: exec vpn certificate local export tftp <certificate name> <exported_certificate.name> <IP_TFTP_server>

Unfortunately, this command only export the certificate without the key.