To import and sign the CSR:
- Back on the FortiAuthenticator, go to Certificate Management > End Entities > Users and import the .csr certificate created earlier.
- Once imported, you should see that the certificate has been signed by the FortiAuthenticator, with a Status of Active. Highlight the certificate and select Export Certificate.
Make sure to select the Certificate authority from the dropdown menu, and set the Hash algorithm to SHA-256, as configured earlier.
This will save a .cer file to your local drive.