FortiADC SSL Imprt

[heretolearn]

In the process of renewing SSL certs, this is the first time doing ADC, staff that built is no longer here. 

I created the CSR via the local servers IIS, cert was created with DigiCert and uploaded to the same IIS. 

I then exported the .pfx from this server getting the following errors when trying to import into ADC.

type: PKCS12 Certificate it fails with the following error 'Failed to store the private key'

I then used open ssl to get .crt and .key and attempted the following:

type: Certificate. and applied the .crt and .key files but get the following error: 'The imported local certificate is invalid.'

Not sure what I'm doing wrong here, any help will be greatly appreciated. 

Thank you

[Jean-Philippe_P]

Hello heretolearn, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

[Jean-Philippe_P]

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

[ebilcari]

Have you managed to solve this issue yet? When it comes to certificates, they practically never work on the first try :). Both formats you have tried are supported by FortiADC. Make sure that the private key is exportable while exporting the .pfx file from IIS. Which firmware version is this setup running?

[heretolearn]

We are on 7.4.4, we plan on updating soon to 7.4.7.

I have confirmed the key is exported from IIS. 

I have also just tried to create the CSR via ADC itself, but get a 'import is not as expected' or "Failed to store the Privat Key"