- Go to System > Certificates and select Generate.
- Enter a Certificate Name, the external IP address of your FortiGate, and an E-Mail address.
- To ensure the certificate is securely encrypted, set Key Type to RSA and Key Size to 2048 Bit (the industry standard).
When generated, the certificate shows a Status of Pending.
- To save the .csr file to your local drive, highlight the certificate and select Download.