Creating a CSR on the FortiGate

To create a CSR:

1. On the FortiGate, go to System > Certificates and select Generate to create a new certificate signing request (CSR).

Enter a Certificate Name, the Internet facing IP address of the FortiGate, and a valid email address, then configure the key options as shown in the example.
The Subject Alternative Name field must be configured with the internet facing IP address or FQDN in the following format: IP:x.x.x.x or DNS:hostname.example.com.



2. Once created, the certificate will show a Status of Pending. Highlight the certificate and select Download.



This will save a .csr file to your local drive.