Technical Note: SSL Certificate File Location

[FortiKoala]

Description
SSL Certificate File Location in NAC.  See Cookbook Recipe SSL Certificates for certificate installation instructions.




Scope
Versions: 8.x

Solution
Administrative UI

Location: Control Server

/bsc/campusMgr/.keystore (certificate is under the "tomcat" alias within the .keystore file)

CLI command to view certificate:
keytool -list -v -keystore /bsc/campusMgr/.keystore -storepass ^8Bradford%23 -alias tomcat

Persistent Agent

Location: Application Server

/bsc/campusMgr/.keystore (certificate is under the "agent" alias within the .keystore file)

CLI command to view certificate:

keytool -list -v -keystore /bsc/campusMgr/.keystore -storepass ^8Bradford%23 -alias agent

Persistent Agent Cert Check

Location: Application Server
/bsc/campusMgr/.keystore (certificate is under the "agent_trust_0" alias within the .keystore file)

CLI command to view certificate:

keytool -list -v -keystore /bsc/campusMgr/.keystore -storepass ^8Bradford%23 -alias agent_trust_0

Portal

Location: Application Server

Active certificate: /bsc/siteConfiguration/apache_ssl/server.crt
Active private key:  /bsc/siteConfiguration/apache_ssl/server.key
Active root chain (includes any intermediate certificates and root certificate):  /bsc/siteConfiguration/apache_ssl/server.ca-bundle

CLI command to view certificate:

openssl x509 -noout -text -in /bsc/siteConfiguration/apache_ssl/server.crt

Administrative UI method to view all certificates:
Navigate to System > Setting > Security > Certificate Management