FortiAnalyzer instances on AWS (PAYG) obtain FortiCare-generated licenses automatically.
When logging into a FortiAnalyzerAWS On Demand instance for the first time, a pre-login disclaimer page is displayed.
After successful login, the FAZ-AWS instance retrieves the license from the FortiCare server. This license includes a certificate that uses the serial number as the CN name.
The following is a comparison between the local certificate in a FortiAnalyzer 6.2.3 and 6.4.0 AWS On Demand instance.
FortiAnalyzer-AWS On Demand 6.2.3
FortiAnalyzer-AWS On Demand 6.4.0