Chapter 1 What’s New for FortiOS 5.0 : Security Features : New SIP ALG features : Inspecting SIP over SSL/TLS (secure SIP) : Adding the SIP server and client certificates
  
Adding the SIP server and client certificates
A VoIP profile that supports SSL/TLS SIP requires one certification for the SIP server and one certificate that is used by all of the clients. Use the following steps to add these certificates to the FortiGate unit. Before you start, make sure the client and server certificate files and their key files are accessible from the management computer.
1. Go to System > Certificates > Local Certificates and select Import.
2. Set Type to Certificate.
3. Browse to the Certificate file and the Key file and select OK.
4. Enter a password for the certificate and select OK.
The certificate and key are uploaded to the FortiGate unit and added to the Local Certificates List.
5. Repeat to upload the other certificate.
The certificates are added to the list of Local Certificates as the filenames you uploaded. You can add comments to make it clear where the certificate is from and how it is intended to be used.