Move Cert to other VDOM

[random_guy]

I have a cert for an SSL VPN in one VDOM and would like to copy it to another VDOM for a different SSL VPN. I need to keep both VPNs running for about a month. Is there a way to do this or do I just have to purchase a new cert? 

Thanks!

[ryan_www]

I think it might be possible to download it and then upload it to the other VDOM or the Global VDOM from System Certificates.  Have you tried that?

[random_guy]

The upload fails. I assume because the private key was generated in the other VDOM and isn't shared between. 

[ryan_www]

Oh bummer, yeah that makes sense.  Hopefully someone else will have another idea.

[ryan_www]

It sounds like you can extract the private key with the cli using "show full", but you will need to know the password it was encrypted with to reuse it.  

https://community.fortinet.com/t5/Fortinet-Forum/FortiGate-SSL-Certification-Private-Key-Export/td-p...

[random_guy · Accepted solution]

Found it.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Moving-or-copying-a-Certificate-and-its-Pr...