Can't upload self signed certificate: Incorrect certificate file key size for CA/LOCAL/REM

[martin_ivanov]

I am trying to generate self signed certificate/key, using openssl (1.1.0h) and following procedure:

openssl genrsa -aes256 -out fgtssl.key 2048openssl req -new -key fgtssl.key -out fgtssl.csropenssl x509 -req -days 365 -in fgtssl.csr -signkey fgtssl.key -out fgtssl.crt When attempting to import into Fortigate (v6.0.3 build0200 KVM),  getting "Incorrect certificate file key size for CA/LOCAL/REM" . I would like to configure IPSEC VPN dialup using own generated certificates.What is wrong with the certificate ? Martin.

[martin_ivanov]

IT turned to be licensing issue.

It works just as expected.

[Lev]

I'm using Fortigate VM evaluation version, is this a reason why I can't upload new certificate to the firewall?