{"id":5592,"date":"2026-03-24T10:40:06","date_gmt":"2026-03-24T10:40:06","guid":{"rendered":"https:\/\/cheapsslweb.com\/resources\/?p=5592"},"modified":"2026-03-24T10:40:07","modified_gmt":"2026-03-24T10:40:07","slug":"how-to-install-an-acme-ssl-certificate-on-fortigate","status":"publish","type":"post","link":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate","title":{"rendered":"How to Install an ACME SSL Certificate on FortiGate?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">FortiGate firewalls support the automatic installation of SSL certificates to facilitate secure remote access, manage Trusted HTTPS connections, and maintain uninterrupted SSL VPN connectivity.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Within this article, you will first learn about using native or alternative methods for sending ACME SSL Certificate requests to your FortiGate Firewall(s) via the use of the ACME Protocol. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You will then receive a complete overview of each process needed to create an ACME SSL Certificate for your FortiGate(s), using both native and alternative issuance methods.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Prerequisites<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before you begin, ensure you have:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>FortiOS 7.6.0 or newer<\/strong> (required for EAB fields)<\/li>\n\n\n\n<li><strong>Administrator access<\/strong> to the FortiGate CLI<\/li>\n\n\n\n<li><strong>ACME directory URL<\/strong> from your certificate provider<\/li>\n\n\n\n<li>External Account Binding credentials (<strong>KID + HMAC key<\/strong>)<\/li>\n\n\n\n<li>A domain name pointing to your <strong>FortiGate\u2019s public IP<\/strong><\/li>\n\n\n\n<li><a href=\"https:\/\/cheapsslweb.com\/blog\/port-80-http-vs-port-443-https-major-difference-to-know\/\">Port 80<\/a> open for <strong>HTTP-01 validation<\/strong><\/li>\n\n\n\n<li><strong>Outbound HTTPS access<\/strong> from FortiGate to the CA endpoint<\/li>\n\n\n\n<li>Accurate system time (NTP configured)<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Method 1: Native ACME Integration on FortiGate<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">With the native integration of ACME, you can automate the issuance and renewal of certificates without needing an external client, and you can complete both tasks directly on your FortiGate device. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This allows better management and control over your certificates for the entire duration of the certificate\u2019s life cycle since the FortiGate can connect directly to the ACME server.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 1: Verify FortiOS Version<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Log in to the CLI and check your firmware:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>get system status<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><em>The prior versions do not support the acme-eab-key-id and acme-eab-key-hmac parameters<\/em><\/strong>; they are used in conjunction with each other.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 2: Create an ACME Certificate Object<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>To create a local configured certificate to enable ACME enrollment:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>config vpn certificate local\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 edit \"acme-vpn-cert\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set enrollment acme\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set acme-ca-url \"https:\/\/acme.yourca.com\/v2\/acme\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set acme-eab-key-id \"YOUR_EAB_KID\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set acme-eab-key-hmac \"YOUR_EAB_HMAC_KEY\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set acme-email \"admin@example.com\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set acme-domain \"vpn.example.com\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set acme-auth-url \"http:\/\/vpn.example.com\/.well-known\/acme-challenge\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set auto-regenerate enable\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set auto-regenerate-days 30\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 next\nend<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">The settings for this step mean that FortiGate will automatically find and update ACME certificates using external account binding for authentication.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 3: Ensure HTTP-01 Validation Works<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>To complete the ACME HTTP-01 validation process, you will need:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Port 80 is accessible over the Internet<\/li>\n\n\n\n<li>The address <strong><em>http:\/\/vpn.example.com\/.well-known\/acme-challenge\/<\/em><\/strong> is accessible<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If HTTPS redirection is enabled, create an exception so validation traffic remains on HTTP.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>If using virtual IP (VIP) configuration:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>config firewall vip\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 edit \"acme-http\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set extintf \"wan1\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set extip &lt;public-ip>\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set mappedip \"192.168.1.99\"\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set extport 80\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set mappedport 80\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 set protocol tcp\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 next\nend<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Replace placeholder IP addresses with your actual configuration.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 4: Trigger Certificate Enrollment<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Start the certificate request:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>execute vpn certificate local generate \"acme-vpn-cert\"<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>FortiGate will:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Contact the ACME server<\/li>\n\n\n\n<li>Complete domain validation<\/li>\n\n\n\n<li>Retrieve the signed certificate<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 5: Verify Certificate Status<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Check the certificate:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>get vpn certificate local<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Look for:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Status: valid<\/li>\n\n\n\n<li>Issuer: Your CA Name<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>If the status is pending or invalid, verify:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>DNS records<\/li>\n\n\n\n<li>Port 80 accessibility<\/li>\n\n\n\n<li>EAB credentials<\/li>\n\n\n\n<li>Outbound connectivity to the CA<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 6: Assign the Certificate<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Apply the certificate to SSL VPN or HTTPS services:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>config vpn ssl settings<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; set servercert \"acme-vpn-cert\"<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; end<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Or via GUI:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>VPN \u2192 SSL-VPN Settings \u2192 Server Certificate \u2192 Select acme-vpn-cert<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Once applied, your FortiGate will present the trusted certificate to users.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 7: Automatic Renewal<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Your FortiGate will automatically renew any certificate you issue according to the policy on how many days prior to expiration you set for auto-regeneration. <strong>To test the renewal manually, use the command:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>execute vpn certificate local renew \"acme-vpn-cert\"<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">If there are problems renewing your certificate, check local firewall rules, DNS Resolution, and the CA Rate Limit.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Method 2 &#8211; External Issuance via ACME.sh<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If your ACME endpoint does not directly integrate with your FortiGate device, you will need to use acme.sh to create your certificate outside of FortiGate, and then import it into the FortiGate firewall.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By doing this, you have more control over where certificates will be generated while having the ability to perform certificate issuance using another operating system (Linux, macOS, or BSD).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At the same time, you benefit from being able to automatically issue the certificates via ACME automation, as well as from utilizing External Account Binding (EAB).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 1: Install ACME.sh<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">To install ACME.sh on a machine with a network connection (Linux\/macOS), run the Installation script. The script will download ACME.sh and configure the necessary components for you to use your Client to communicate with the ACME Directory at your Certificate Authority.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>On a Linux or macOS system:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>curl https:\/\/get.acme.sh | sh<br>source ~\/.bashrc<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Installation must occur from a separate server, as FortiGate does not support executing custom shell scripts from that device.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 2: Register Account with EAB<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Once completed, the next step is to register an account with your Certificate Authority for External Account Binding. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>To do this, you will need to provide the following information: <\/strong>URL to the ACME Directory, Key ID (KID), and HMAC key.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>acme.sh --register-account \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --server https:\/\/acme.yourca.com\/v2\/acme \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --eab-kid \"YOUR_EAB_KID\" \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --eab-hmac-key \"YOUR_EAB_HMAC_KEY\" \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -m admin@example.com<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Once your account has been successfully registered, your Client will be authenticated and ready to request certificates for all valid domains with your Certificate Authority&#8217;s approval.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 3: Issue the Certificate<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Once you have registered your account, you will then be able to start the process of getting a certificate by giving us the domain name and the way you want to validate it (usually HTTP-01 with a web root path).<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>acme.sh --issue \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -d vpn.example.com \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --webroot \/var\/www\/html \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --server https:\/\/acme.yourca.com\/v2\/acme \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --eab-kid \"YOUR_EAB_KID\" \\<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; --eab-hmac-key \"YOUR_EAB_HMAC_KEY\"<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Certificate files will be stored under:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>~\/.acme.sh\/vpn.example.com\/<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">ACME.sh will reach out to the <a href=\"https:\/\/cheapsslweb.com\/ssl-brands\">Certificate Authority (CA)<\/a>, validate your domain, and download the certificate, full chain, and private key once completed. If successful, the certificate files will be saved on your device, ready to be deployed onto your FortiGate.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 4: Import into FortiGate<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Using either the GUI or the CLI, you can import the certificate files into FortiGate. You must upload both the private key and the complete certificate chain to allow the firewall to showcase the trusted certificate to its clients correctly.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Via GUI:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>System \u2192 Certificates \u2192 Import \u2192 Local Certificate<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Or via CLI:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>config vpn certificate local<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; edit \"acme-vpn-cert\"<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; set private-key \"-----BEGIN PRIVATE KEY-----...\"<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; set certificate \"-----BEGIN CERTIFICATE-----...\"<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; next<br>end<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Protect and transfer your private key securely while importing it so that you minimize the risk of exposure or compromise throughout the entire process.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><a><\/a>Step 5: Reassign and Automate Renewal<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When re-generating an imported cert, you will likely need to re-import it to your system. This process can be automated by creating recurring tasks and\/or executing renewals via secure FTP (SCP or API).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Example:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>scp fullchain.cer admin@fortigate:\/root\/<br>scp vpn.example.com.key admin@fortigate:\/root\/<\/em><\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Then reload the certificate:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><em>execute vpn certificate local import \"acme-vpn-cert\"<\/em><\/code><\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Automating SSL deployment using FortiGate can be made feasible with the correct certificate authority supporting your project. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CheapSSLweb has developed an affordable, reliable, and straightforward approach to providing SSL certificates that support ACME-ready deployments across multiple firewalls, servers, and cloud computing platforms.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The installation of your SSL will be simplified, the renewal of your certificates will be seamless, and securing your network will not cost you a fortune. Start using <strong><a href=\"https:\/\/cheapsslweb.com\/\">CheapSSLweb<\/a><\/strong> now to manage your certificates with ease and assurance.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>FortiGate firewalls support the automatic installation of SSL certificates to facilitate secure remote access, manage Trusted HTTPS connections, and maintain uninterrupted SSL VPN connectivity. Within this article, you will first learn about using native or alternative methods for sending ACME SSL Certificate requests to your FortiGate Firewall(s) via the use of the ACME Protocol. You<span class=\"morelink d-block mt-3\"><a href=\"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate\">Read More<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":5596,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[85],"tags":[556],"class_list":["post-5592","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ssl-installation-guides","tag-acme-ssl-installation-on-fortigate","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Install ACME SSL Certificate on FortiGate?<\/title>\n<meta name=\"description\" content=\"Follow the step by step tutorial to install an ACME SSL Certificate on Fortigate Firewall version 7 or above using 2 different methods.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Install ACME SSL Certificate on FortiGate?\" \/>\n<meta property=\"og:description\" content=\"Follow the step by step tutorial to install an ACME SSL Certificate on Fortigate Firewall version 7 or above using 2 different methods.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate\" \/>\n<meta property=\"og:site_name\" content=\"CheapSSLWeb.com Resources\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cheapsslweb\" \/>\n<meta property=\"article:published_time\" content=\"2026-03-24T10:40:06+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-24T10:40:07+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cheapsslweb.com\/resources\/wp-content\/uploads\/2026\/03\/install-acme-ssl-fortigate.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"960\" \/>\n\t<meta property=\"og:image:height\" content=\"621\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Janki Mehta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cheapsslweb\" \/>\n<meta name=\"twitter:site\" content=\"@cheapsslweb\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate\"},\"author\":{\"name\":\"Janki Mehta\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#\\\/schema\\\/person\\\/c7d26eacacd9392c23be9d82e9af145e\"},\"headline\":\"How to Install an ACME SSL Certificate on FortiGate?\",\"datePublished\":\"2026-03-24T10:40:06+00:00\",\"dateModified\":\"2026-03-24T10:40:07+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate\"},\"wordCount\":1015,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/install-acme-ssl-fortigate.webp\",\"keywords\":[\"ACME SSL Installation on FortiGate\"],\"articleSection\":[\"SSL Installation Guides\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate\",\"url\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate\",\"name\":\"How to Install ACME SSL Certificate on FortiGate?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/install-acme-ssl-fortigate.webp\",\"datePublished\":\"2026-03-24T10:40:06+00:00\",\"dateModified\":\"2026-03-24T10:40:07+00:00\",\"description\":\"Follow the step by step tutorial to install an ACME SSL Certificate on Fortigate Firewall version 7 or above using 2 different methods.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate#primaryimage\",\"url\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/install-acme-ssl-fortigate.webp\",\"contentUrl\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/install-acme-ssl-fortigate.webp\",\"width\":960,\"height\":621,\"caption\":\"SSL Installation on Fortigate\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/how-to-install-an-acme-ssl-certificate-on-fortigate#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Install an ACME SSL Certificate on FortiGate?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#website\",\"url\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/\",\"name\":\"CheapSSLWeb.com\",\"description\":\"SSL Errors and Installation Tutorials\",\"publisher\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#organization\"},\"alternateName\":\"Cheap SSL Web\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#organization\",\"name\":\"CheapSSLWeb\",\"alternateName\":\"Cheap SSL Web\",\"url\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/logo.png\",\"width\":177,\"height\":60,\"caption\":\"CheapSSLWeb\"},\"image\":{\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/cheapsslweb\",\"https:\\\/\\\/x.com\\\/cheapsslweb\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/cheapsslweb\\\/\",\"https:\\\/\\\/www.pinterest.com\\\/cheapsslweb\\\/\",\"https:\\\/\\\/www.instagram.com\\\/cheapsslweb\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/#\\\/schema\\\/person\\\/c7d26eacacd9392c23be9d82e9af145e\",\"name\":\"Janki Mehta\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcheapsslweb.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fjanki-mehta-jpg.webp&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcheapsslweb.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fjanki-mehta-jpg.webp&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcheapsslweb.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fjanki-mehta-jpg.webp&r=g\",\"caption\":\"Janki Mehta\"},\"description\":\"Janki Mehta is a Cyber-Security Enthusiast having 7+ years of experience and knowledge about Encryption, Digital Certificates and Online Security, She helps online users to stay safe and protect their online presence. Explore SSL Errors, Installation Guide and Security Tutorials for Safe Browsing and Web Security Experience.\",\"sameAs\":[\"https:\\\/\\\/cheapsslweb.com\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/pw-jankimehta\\\/\"],\"url\":\"https:\\\/\\\/cheapsslweb.com\\\/resources\\\/author\\\/janki-mehta\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Install ACME SSL Certificate on FortiGate?","description":"Follow the step by step tutorial to install an ACME SSL Certificate on Fortigate Firewall version 7 or above using 2 different methods.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate","og_locale":"en_US","og_type":"article","og_title":"How to Install ACME SSL Certificate on FortiGate?","og_description":"Follow the step by step tutorial to install an ACME SSL Certificate on Fortigate Firewall version 7 or above using 2 different methods.","og_url":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate","og_site_name":"CheapSSLWeb.com Resources","article_publisher":"https:\/\/www.facebook.com\/cheapsslweb","article_published_time":"2026-03-24T10:40:06+00:00","article_modified_time":"2026-03-24T10:40:07+00:00","og_image":[{"width":960,"height":621,"url":"https:\/\/cheapsslweb.com\/resources\/wp-content\/uploads\/2026\/03\/install-acme-ssl-fortigate.webp","type":"image\/jpeg"}],"author":"Janki Mehta","twitter_card":"summary_large_image","twitter_creator":"@cheapsslweb","twitter_site":"@cheapsslweb","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate#article","isPartOf":{"@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate"},"author":{"name":"Janki Mehta","@id":"https:\/\/cheapsslweb.com\/resources\/#\/schema\/person\/c7d26eacacd9392c23be9d82e9af145e"},"headline":"How to Install an ACME SSL Certificate on FortiGate?","datePublished":"2026-03-24T10:40:06+00:00","dateModified":"2026-03-24T10:40:07+00:00","mainEntityOfPage":{"@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate"},"wordCount":1015,"commentCount":0,"publisher":{"@id":"https:\/\/cheapsslweb.com\/resources\/#organization"},"image":{"@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslweb.com\/resources\/wp-content\/uploads\/2026\/03\/install-acme-ssl-fortigate.webp","keywords":["ACME SSL Installation on FortiGate"],"articleSection":["SSL Installation Guides"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate#respond"]}]},{"@type":"WebPage","@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate","url":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate","name":"How to Install ACME SSL Certificate on FortiGate?","isPartOf":{"@id":"https:\/\/cheapsslweb.com\/resources\/#website"},"primaryImageOfPage":{"@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate#primaryimage"},"image":{"@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate#primaryimage"},"thumbnailUrl":"https:\/\/cheapsslweb.com\/resources\/wp-content\/uploads\/2026\/03\/install-acme-ssl-fortigate.webp","datePublished":"2026-03-24T10:40:06+00:00","dateModified":"2026-03-24T10:40:07+00:00","description":"Follow the step by step tutorial to install an ACME SSL Certificate on Fortigate Firewall version 7 or above using 2 different methods.","breadcrumb":{"@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate#primaryimage","url":"https:\/\/cheapsslweb.com\/resources\/wp-content\/uploads\/2026\/03\/install-acme-ssl-fortigate.webp","contentUrl":"https:\/\/cheapsslweb.com\/resources\/wp-content\/uploads\/2026\/03\/install-acme-ssl-fortigate.webp","width":960,"height":621,"caption":"SSL Installation on Fortigate"},{"@type":"BreadcrumbList","@id":"https:\/\/cheapsslweb.com\/resources\/how-to-install-an-acme-ssl-certificate-on-fortigate#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cheapsslweb.com\/resources\/"},{"@type":"ListItem","position":2,"name":"How to Install an ACME SSL Certificate on FortiGate?"}]},{"@type":"WebSite","@id":"https:\/\/cheapsslweb.com\/resources\/#website","url":"https:\/\/cheapsslweb.com\/resources\/","name":"CheapSSLWeb.com","description":"SSL Errors and Installation Tutorials","publisher":{"@id":"https:\/\/cheapsslweb.com\/resources\/#organization"},"alternateName":"Cheap SSL Web","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cheapsslweb.com\/resources\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cheapsslweb.com\/resources\/#organization","name":"CheapSSLWeb","alternateName":"Cheap SSL Web","url":"https:\/\/cheapsslweb.com\/resources\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cheapsslweb.com\/resources\/#\/schema\/logo\/image\/","url":"https:\/\/cheapsslweb.com\/resources\/wp-content\/uploads\/2022\/03\/logo.png","contentUrl":"https:\/\/cheapsslweb.com\/resources\/wp-content\/uploads\/2022\/03\/logo.png","width":177,"height":60,"caption":"CheapSSLWeb"},"image":{"@id":"https:\/\/cheapsslweb.com\/resources\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/cheapsslweb","https:\/\/x.com\/cheapsslweb","https:\/\/www.linkedin.com\/company\/cheapsslweb\/","https:\/\/www.pinterest.com\/cheapsslweb\/","https:\/\/www.instagram.com\/cheapsslweb\/"]},{"@type":"Person","@id":"https:\/\/cheapsslweb.com\/resources\/#\/schema\/person\/c7d26eacacd9392c23be9d82e9af145e","name":"Janki Mehta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcheapsslweb.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fjanki-mehta-jpg.webp&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcheapsslweb.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fjanki-mehta-jpg.webp&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1fba817ef81065f1393461fc3a0d85c40f2cc826919819ea4df4b12d76566e62?s=96&d=https%3A%2F%2Fcheapsslweb.com%2Fblog%2Fwp-content%2Fuploads%2F2023%2F02%2Fjanki-mehta-jpg.webp&r=g","caption":"Janki Mehta"},"description":"Janki Mehta is a Cyber-Security Enthusiast having 7+ years of experience and knowledge about Encryption, Digital Certificates and Online Security, She helps online users to stay safe and protect their online presence. Explore SSL Errors, Installation Guide and Security Tutorials for Safe Browsing and Web Security Experience.","sameAs":["https:\/\/cheapsslweb.com\/","https:\/\/www.linkedin.com\/in\/pw-jankimehta\/"],"url":"https:\/\/cheapsslweb.com\/resources\/author\/janki-mehta"}]}},"_links":{"self":[{"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/posts\/5592","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/comments?post=5592"}],"version-history":[{"count":3,"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/posts\/5592\/revisions"}],"predecessor-version":[{"id":5599,"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/posts\/5592\/revisions\/5599"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/media\/5596"}],"wp:attachment":[{"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/media?parent=5592"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/categories?post=5592"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cheapsslweb.com\/resources\/wp-json\/wp\/v2\/tags?post=5592"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}