How-to: Change WebGUI HTTPS certificate on Fortinet devices

Below is a list of commands required to change the default HTTPS certificate that gets presented on the admin WebGUI.

For each of these examples I've already loaded a certificate called 'webgui-cert'. Change this value to match the certificate you import.

FortiGate

config system global

set admin-server-cert webgui-cert

end

FortiAnalyzer

config system admin setting

set admin_server_cert webgui-cert

end

FortiManager

config system admin setting

set admin_server_cert webgui-cert

end

FortiMail

config system global

set default-certificate webgui-cert

end

FortiRecorder

config system global

set default-certificate webgui-cert

end

FortiAuthenticator

I haven't found a way of configuring this via the CLI, but this can easily be done via the WebGUI. Goto System > Administration > GUI Access and select the HTTPS certificate you wish to use. In this example my certificate name is 'authenticator' and I'm using a local CA.

FortiCache

config system global

set admin-server-cert webgui-cert

end