Creating an Intermediate CA on the FortiAuthenticator

To create an Intermediate CA:

1. On the FortiAuthenticator, go to Certificate Management > Certificate Authorities > Local CAs and select Import.

Set Type to CSR to sign, enter a Certificate ID, and import the CSR file. Make sure to select the Certificate authority from the dropdown menu, and set the Hash algorithm to SHA-256.



2. Once imported, you should see that the certificate has been signed by the FortiAuthenticator, showing a Status of Active, and with the CA Type of Intermediate (non-signing) CA. Highlight the certificate and select Export Certificate.



This will save a .crt file to your local drive.