How do I generate a CA certificate on a FortiGate 101F for connecting Android device wifi??

Hardware: FortiGate 101F paired with FortiAP.

Account: I have created a local user on the firewall.

Goal: I want an Android tablet to connect to the Wi-Fi using TLS authentication.

How do I generate the necessary client certificate for the Android tablet to authenticate and connect to the Wi-Fi?

I've already asked Gemini and ChatGPT, but neither provided the correct procedure. Both of them just gave me AI hallucinations.