Uploaded SSL certificate self signed missing on FortiSwitch

[jihen]

Hello,

I generated an SSL certificate with OpenSSL, self-signed, and then signed it with our internal CA to use for the HTTPS management interface on my FortiSwitch.
I uploaded the certificate and private key through the web interface. The system shows “Upload successful,” but the certificate does not appear in the certificate list and is not applied to the HTTPS interface.

Could someone please advise how to resolve this issue or the correct way to upload a self-signed certificate on FortiSwitch?

Thank you.

[Markus_M]

Make sure it has the correct key usages (digitalSignature, keyEncipherment) on the certificate and extended key usage (server authentication).

[jihen]

Thank you for the suggestion. I have checked the certificate, and it does include the correct key usages. Despite that, the certificate still does not appear in the FortiSwitch certificate list after upload.

Do you have any other recommendations or known issues with FortiSwitch accepting internally signed certificates?

[Markus_M]

Then you may need to re-check what you created and uploaded, what the switch and firmware is. It works fine for me on a FortiSwitch. I can select the certificate in the SSL config as GUI HTTPS certificate.