Generating a CSR on a FortiGate

1. Go to System > Certificates and select Generate.
2. Enter a Certificate Name, the external IP address of your FortiGate, and an E-Mail address.
3. To ensure the certificate is securely encrypted, set Key Type to RSA and Key Size to 2048 Bit (the industry standard).

   

   When generated, the certificate shows a Status of Pending.

   

4. To save the .csr file to your local drive, highlight the certificate and select Download.