Uploading a certificate using the CLI

Generate certificate signing request

To generate a CSR, enter the following:

# execute vpn certificate local generate <type> <object_name> <key_size> <CN> <country> <state/province> <city> <OU> <email> [SANs]

Import

To import a certificate, enter the following:

config vpn certificate {local ca remote ocsp-server crl}

Refer to the FortiOS CLI Reference for detailed options for each certificate type (local, CA, remote, OSCP server, CRL).