FortiSIEM Collector self-signed certificate has expired

[tienj]

Hi,

We are running FortiSIEM v5.2.1 with a Collector connected to it. The Collector self-signed SSL Certificate had expired. How do we renew the self-signed certificate for the Collector? I cannot find any forums/documentations how to remediate this issue. 

[Anonymous]

Hello @tienj , 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

 Fortinet Community Team 

[premchanderr]

Hi @tienj ,

If you have a custom certificate then you need to renew the cert which can be then replaced in the httpd.conf file.

Also you need CA cert if it'signed by a CA. You need to replace these certs in SIEM and change the httpd

Edit /etc/httpd/conf.d/ssl.conf file and make sure these parameters are configured with your certificate and private key filename.
- SSLCertificateFile /etc/httpd/conf.d/fsiem.crt <<<<<<<<<<<< path where you have put the cert in FSM
- SSLCertificateKeyFile /etc/httpd/conf.d/fsiem.key <<<<<<<<< Path where you have put CA cert key

# Restart Apache.

service httpd restart

Note: Take a snapshot of VM before doing any changes, so that you can revert in case of issue.

Related Link:
https://community.fortinet.com/t5/FortiSIEM/Technical-Tip-How-to-apply-a-self-signed-or-certificate/...

Regards,

Prem Chander R