Fortinet Technologies Inc. Page 93 FortiVoice Enterprise Phone System 4.0.0 Administration Guide
4. Click OK.
The certificate is generated, and can be downloaded to your management computer for
submission to a certificate authority (CA) for signing. For more information, see
“Downloading a certificate signing request” on page 93.
Downloading a certificate signing request
After you have generated a certificate request, you can download the request file to your
management computer in order to submit the request file to a certificate authority (CA) for
signing.
For other related steps, see “Obtaining and installing a local certificate” on page 90.
To download a certificate request
1. Go to System > Certificate > Local Certificate.
2. Click the row that corresponds to the certificate request in order to select it.
3. Click Download, then select Download from the pop-up menu.
Your web browser downloads the certificate request (.csr) file.
Submitting a certificate request to your CA for signing
After you download the certificate request file, you can submit the request to you CA for
signing.
For other related steps, see “Obtaining and installing a local certificate” on page 90.
To submit a certificate request
1. Using the web browser on the management computer, browse to the web site for your CA.
2. Follow your CA’s instructions to place a Base64-encoded PKCS #12 certificate request,
uploading your certificate request.
3. Follow your CA’s instructions to download their root certificate and Certificate Revocation
List (CRL), and then install the root certificate and CRL on each remote client.
4. When you receive the signed certificate from the CA, install the certificate on the FortiVoice
unit. For more information, see “Importing a certificate” on page 94.
Locality (City) Type the name of the city or town where the FortiVoice unit is
located. (Optional)
State/Province Type the name of the state or province where the FortiVoice unit is
located. (Optional)
Country Select the name of the country where the FortiVoice unit is located.
(Optional)
E-mail Type an email address that may be used for contact purposes.
(Optional)
Key type Displays the type of algorithm used to generate the key.
This option cannot be changed, but appears in order to indicate that
only RSA is currently supported.
Key size Select a security key size of 512 Bit, 1024 Bit, 1536 Bit or 2048 Bit.
Larger keys are slower to generate, but provide better security.