Question

I want to replace the default HTTPS/SSL certificate with one that I have created, how do I do that?

Answer

Assuming that the new certificate is correctly uploaded to the firewall, follow this procedure:

1. Open the configuration and go to System->Remote Management->Advanced Settings. Under WebUI->HTTPS Certificate change the certificate to the one you want to use.
2. Deploy the change and then restart the firewall.

Requirements for the certificate to be used in OneConnect can be found here.

https://kb.clavister.com/336138791/oneconnect-vpn-certificate-not-trusted

This operation will also change the default HTTPS certificate used for firewall WebUI management as well and will also update the certificate for the SSL VPN legacy server.

Related articles