Certificate Authentication for ipsec vpn

Dears

I'm trying to rplace pre-shared key authentication with certificate authentication in a forticlient connecting to fortigate. I need  the full procedure to do that as i tried and failed to acomplish this on both sides of the tunnel.