CLI Reference

Using the CLI
config
execute
- backup
- backup-restore
- blocklist
- certificate
- checklogdisk
- checkmaildisk
- cleanqueue
- create
- date
- db
- dlp
- endpoint
- erase-filesystem
- factoryreset
- factoryreset config
- factoryreset config2
- factoryreset disk
- factoryreset keeplicense
- factoryreset shutdown
- factoryreset2
- factoryreset2 keeplicense
- fips
- formatlogdisk
- formatmaildisk
- formatmaildisk-backup
- forticloud
- ha commands
- ibe data
- ibe user
- license
- lvm
- maintain
- nslookup
- partitionlogdisk
- ping
- ping-option
- ping6
- ping6-option
- raid
- reboot
- reload
- restore as
- restore av
- restore config
- restore image
- restore mail-queues
- safelist
- sched-backup
- shutdown
- smtptest
- ssh
- storage
- telnettest
- traceroute
- update
- user-config
- vm
get
- system performance
- system status
show & show full-configuration
Change Log

Home FortiMail 7.2.0 CLI Reference

7.2.0

system certificate local

Use this command to import signed certificates and certificate requests in order to install them for local use by the FortiMail unit.

FortiMail units require a local server certificate that it can present when clients request secure connections, including:

the web-based manager (HTTPS connections only)
webmail (HTTPS connections only)
secure email, such as SMTPS, IMAPS, and POP3S

When using this command to import a local certificate, you must enter the commands in the order described in the following syntax. This is because private-key will need the password to decrypt the private key if it was encrypted and certificate will try to find a matched private key file.

Syntax

config system certificate local

edit <name_str>

set password

set private-key

set certificate <cert_str>

set csr <csr_str>

set comments <comment_str>

end

Variable	Description	Default
<name_str>	Enter a name for the certificate to be imported.
password	Enter a password for the certificate.
private-key	Enter a private key for the certificate. Note: A random password is used to encrypt the private key, to prevent the private key from becoming visible when using the `show` command.
certificate <cert_str>	Enter or paste the certificate in PEM format to import it.
csr <csr_str>	Enter or paste the certificate signing request in PEM format to import it.
comments <comment_str>	Enter any comments for this certificate.