Generating CSR, then importing signed certificate on Fortigates through FortiManager
I need to generate a CSR, then sign it from the corporate CA as SubCA to use it for SSL decryption.
I have done this many times, understand the general principles of SSL and PKI and know how to do it directly on Fortigate.
However i dont seem to find a way, neither documentation on what is the right way to do it for Fortimanager-managed Fortigates.
What i saw and tested:
1. provisioning templates->certificate templates - the explaination in documents is quite vague and ambigous, but as far as i understood and tested seems like it is only for selfsigned and using the FMGR itself as CA. am i right?
2. device management->device->vdom->system:certificates - normally these menus provide functionality very similar to directly managing the fortigate, however it seems there is only import option and no generate option through FMGR
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.