Chapter 3 Authentication for FortiOS 5.0 : Certificate-based authentication
  
Certificate-based authentication
This section provides an overview of how the FortiGate unit verifies the identities of administrators, SSL VPN users, or IPsec VPN peers using X.509 security certificates.
The following topics are included in this section:
What is a security certificate?
Certificates overview
Managing X.509 certificates
Configuring certificate-based authentication
Example — Generate a CSR on the FortiGate unit
Example — Generate and Import CA certificate with private key pair on OpenSSL
Example — Generate an SSL certificate in OpenSSL