Fortigate Certs Date Change on Power Failure

[Nonexisent12]

Hello, for the past few months we've been encountering a bug where after a power failure, or hard reset, some of the certs have had their dates changed. Usually these dates end up changing from something like 2026 to 2006. This happens to our Local CA Certs, and to some of the various SSL certs.

Is this a known issue, and if so is there anyway to preserve or replace the corrupted certs with copies of the originals? Several of our company locations are in rural areas with frequent weather events, leading to power outages even with UPSs installed for each Fortigate.

[Anthony_E]

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[BillH_FTNT]

Hi @Nonexisent12 

Could you please share more detailed information?

• What is the version of your FortiGate device, both software and hardware?
• Do you have any console logs related to the outage?
• Could you please share your configuration with me at bhoang@fortinet.com so we can try to reproduce the issue in our lab?

I am Bill from Fortinet. Thank you

Bill

[Nonexisent12]

All the Fortigates that have had this issue are Fortigate-61Fs and the software build between all of them is FortiGate 7.4.8,build2795.
Currently we are working on a fixing a issue with FortiAnalyzer, and when this latest outage occurred it did not have logs saved. If this does occur again whilst we are troubleshooting this I will gladly send any logs we have on hand.

I will get the configuration sent to you, they are pretty similar across all of our small Fortigates, with slight changes for IP addresses for network segmentation.