Loading a server certificate

To load a certificate for cloud deployments:

1. Click Central Manager Certificate (). The Load Central Manager Certificate dialog opens.

   

2. Click Choose File to upload the certificate file. Only PEM certificates (.pem) are supported.

   Ensure the certificate common name (CN) matches the FQDN of the FortiEDR machine. Otherwise, an error will occur.

3. Click Choose File to upload the private key file.
4. Enter the certificate password in the Private Key Password field.
5. Click Upload.
6. Contact Fortinet Support to configure the certificate.

To load a certificate for on-premise deployments:

1. Upload the certificate using the POST REST API (https://[host-ip]/maintenance/upload-certificate) with admin user. For example:

   POST /maintenance/upload-certificate HTTP/1.1

   Host: localhost

   Content-Type: application/json

   Authorization: Basic YWRtaW46MTIzNDU2Nzg=

   Cookie: JSESSIONID=2CFE588747BE71FEA0B615CE847D43AE

   Content-Length: 3850

   {

   "alias":"ensiloUI",

   "privateKeyPassword": 12345678,

   "privateKeyFile": "LS0tLS1CRUdJTiBSU0E......",

   "certificateBlob": "LS0tLS1CRUdJTiBDRVJUS......."

   }

   Certificates must be in ASCII (x509) format, not DER (binary) format. Ensure the certificate common name (CN) matches the FQDN of the FortiEDR machine. Otherwise, an error will occur.

   Alternatively, contact Fortinet Support to load the server certificate via admin user.

2. On the FortiEDR Manager VM, add or edit the following entries in the /opt/FortiEDR/webapp/application-customer.properties file:
   • connector.ssl.externalAddress={certificate domain/DNS name of machine}
   • smtp.template.server.login={certificate domain/DNS name of machine}

   The properties are case-sensitive and must be in lowercase. Space is not allowed.

3. Restart the FortiEDR Manager VM.