config vpn certificate local
Local keys and certificates.
config vpn certificate local
Description: Local keys and certificates.
edit <name>
set auto-regenerate-days {integer}
set auto-regenerate-days-warning {integer}
set ca-identifier {string}
set certificate {user}
set cmp-path {string}
set cmp-regeneration-method [keyupate|renewal]
set cmp-server {string}
set cmp-server-cert {string}
set comments {string}
set csr {user}
set enroll-protocol [none|scep|...]
set ike-localid {string}
set ike-localid-type [asn1dn|fqdn]
set name-encoding [printable|utf8]
set password {password}
set private-key {user}
set range [global|vdom]
set scep-password {password}
set scep-url {string}
set source [factory|user|...]
set source-ip {ipv4-address}
set state {user}
next
end
config vpn certificate local
|
Parameter |
Description |
Type |
Size |
|||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
auto-regenerate-days |
Number of days to wait before expiry of an updated local certificate is requested (0 = disabled). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
|||||||||
|
auto-regenerate-days-warning |
Number of days to wait before an expiry warning message is generated (0 = disabled). |
integer |
Minimum value: 0 Maximum value: 4294967295 |
|||||||||
|
ca-identifier |
CA identifier of the CA server for signing via SCEP. |
string |
Maximum length: 255 |
|||||||||
|
certificate |
PEM format certificate. |
user |
Not Specified |
|||||||||
|
cmp-path |
Path location inside CMP server. |
string |
Maximum length: 255 |
|||||||||
|
cmp-regeneration-method |
CMP auto-regeneration method. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
cmp-server |
'ADDRESS:PORT' for CMP server. |
string |
Maximum length: 63 |
|||||||||
|
cmp-server-cert |
CMP server certificate. |
string |
Maximum length: 79 |
|||||||||
|
comments |
Comment. |
string |
Maximum length: 511 |
|||||||||
|
csr |
Certificate Signing Request. |
user |
Not Specified |
|||||||||
|
enroll-protocol |
Certificate enrollment protocol. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
ike-localid |
Local ID the FortiGate uses for authentication as a VPN client. |
string |
Maximum length: 63 |
|||||||||
|
ike-localid-type |
IKE local ID type. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
name |
Name. |
string |
Maximum length: 35 |
|||||||||
|
name-encoding |
Name encoding method for auto-regeneration. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
password |
Password as a PEM file. |
password |
Not Specified |
|||||||||
|
private-key |
PEM format key, encrypted with a password. |
user |
Not Specified |
|||||||||
|
range |
Either a global or VDOM IP address range for the certificate. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
scep-password |
SCEP server challenge password for auto-regeneration. |
password |
Not Specified |
|||||||||
|
scep-url |
SCEP server URL. |
string |
Maximum length: 255 |
|||||||||
|
source |
Certificate source type. |
option |
- |
|||||||||
|
|
|
|||||||||||
|
source-ip |
Source IP address for communications to the SCEP server. |
ipv4-address |
Not Specified |
|||||||||
|
state |
Certificate Signing Request State. |
user |
Not Specified |
|||||||||