- On your FortiGate, create a new CSR by going to System > Certificates and select Generate.
- Enter a Certificate Name, the external IP of your FortiGate, and a valid email address.
- To ensure the certificate is securely encrypted, set Key Type to RSA and Key Size to 2048 Bit (the industry standard).
Once generated, the certificate shows a Status of Pending. To save the .csr file to your local drive, highlight the certificate and select Download.