Run the following CLI command to generate an SSL certificate that’s unique to your FortiGate:
execute vpn certificate local generate default-ssl-ca