Monitor local SSL-Certificates with PRTG

[Raru]

Hi Everyone, 

we like to monitor our local SSL-Certificates from our Fortigate with PRTG to E-Mail us when the day of experation is near.

has Anyone found a posibilty to do so ? I looked for a solution the last day an didnt found any. 

Greetings! 

[funkylicious · Accepted solution]

Hi,

You have the posibility to configure a trigger to alert you if you are running FortiOS 7.2.0+ .

https://docs.fortinet.com/document/fortigate/7.2.0/new-features/470232/certificate-expiration-trigge...

[pminarik]

You can run a REST API GET request for /api/v2/monitor/system/available-certificates/

This will dump a list of all certificates present (JSON), and one of the keys is validity from and to, in two formats: unicode timestamp and "YYYY-MM-DD HH:MM:SS GMT".

The output can also be filtered as usual for REST API (e.g. by appending: ?filter=name==Fortinet_CA_SSL ).

[UHa6]

Hi,
in my PRTG there is a sensor for checking ssl certificates (HTTPS) which is working fine for me, around of 30 https certificates are checked once a day. Don't forget to set warning and error level!

If you want to check other certificates than https, you have to do this with a PowerShell script and store it in EXE directory below of "Custom Sensors" in PRTG directory. We did this somewhere but I don't find this now, sorry.

Happy checking