Fortinet 302 FortiWeb 5.0 Patch 6 Administration Guide
7. Click Next.
The Export Private Key step appears.
8. Select Yes, export the private key.
The end-user will require his or her private key in order to authenticate. Without that token (or
if many people possess that token), identity cannot be confirmed.
Transmit and store any private key backups securely, just as you would for passwords. Failure
to store them securely and restrict the private key solely to its intended end-user could allow
others to authenticate as that person, compromising the security of your web sites. In the event
of potential private key compromise, immediately revoke the corresponding personal
certificate. See “Revoking certificates” on page 318.