How can I configure out-of-band Mgmt interface on standalone Fortiauthenticator

We would like to use two interfaces on Fortiauthenticator. One will be used for dedicated Mgmt and the other for service interface. 

As per our secure policy, the mgmt interface has to be connected to Management Vlan, which means we need out-of-band mgmt interface.

Is it possible to have out-of-band mgmt interface and seperate the mgmt routing table and prod routing table?

Thanks,