system certificate local

Use this command to import signed certificates and certificate requests for local use by the FortiMail system.

FortiMail systems require a local server certificate that it can present to identify itself when clients request secure connections, including:

• the GUI (HTTPS connections only)

• webmail or personal quarantine access (HTTPS connections only)

• secure email, such as SMTPS, IMAPS, and POP3S

The local certificate can also be used for the FortiMail system to authenticate itself to an upstream FortiGate in the Security Fabric.

Syntax

config system certificate local

edit <certificate_str>

[set comments <comment_str>]

set password <password_str>

set private-key <key_str>

set certificate <certificate_str>

set csr <csr_str>

end

Variable	Description	Default
<certificate_str>	Enter a name for the certificate.
password <password_str>	Enter the password that was used to encrypt the private key. FortiMail will use the password to decrypt the private key so that it can encrypt data with it. Then also configure private-key <key_str>.
private-key <key_str>	Enter a private key for the certificate. Then also configure the certificate with the corresponding public key in certificate <certificate_str>. The private key is encrypted at rest, and is not visible when using the show command.
certificate <certificate_str>	Enter or paste the certificate in PEM format to import it.
csr <csr_str>	Enter or paste the certificate signing request in PEM format to import it.
comments <comment_str>	Enter a comment or description.

Related topics

system certificate crl

system certificate remote

certificate