Creating a CSR on the FortiGate
To create a CSR:
- On the FortiGate, go to System > Certificates, and select Generate to create a new certificate signing request (CSR).
- Enter a name for the CSR (my-csr), the public IP of this FortiGate, and a valid email address.
Make sure to set Key Type to RSA and Key Size to 2048 Bit. This will ensure the certificate is securely encrypted.
- Once created, the certificate will show a Status of Pending. Highlight the certificate and select Download.
The .csr file to will be saved to your local drive.