Creating an Intermediate CA on the FortiAuthenticator

To create an Intermediate CA:

1. On the FortiAuthenticator, go to Certificate Management > Certificate Authorities > Local CAs and select Import.

Set Type to CSR to sign, enter a Certificate ID, and import the CSR file.

2. Select the Certificate authority configured with the HSM from the dropdown menu, and set the Hash algorithm to SHA-256. Click OK.



3. Once imported, you should see that the certificate has been signed by the FortiAuthenticator, showing a Status of Active, and with the CA Type of Intermediate (non-signing) CA.
   
4. Highlight the certificate and select Export Certificate.



This will save a .crt file to your local drive.