Configure the remaining settings as required, then select OK.Configure the CSR: (below is just an example, change according to reflect the environment).On the FortiGate go to System -> Certificates and select Create/Import -> Generate CSR.Generate and sign a CSR and import the signed certificate to the FortiGate: This article describes how to configure FortiGate to accept connection when using Windows native VPN with a machine certificate, the guide does not cover how to generate a machine certificate and it would be necessary to refer to Microsoft documentation.