Fortinet 5.0 Patch 6 - page 303

Fortinet 303 FortiWeb 5.0 Patch 6 Administration Guide
9. Click Next.
The Export File Format step appears.
10.Select Personal Information Exchange - PKCS #12 (.PFX) as the file format.
11.If you need to absolutely guarantee identity (i.e. not even you, the administrator, will have the
end-user’s private key installed — only the end-user will), mark the check box named Delete
the private key if the export is successful.
For improved performance, do not include all CA certificates from the personal certificate’s
certification path (i.e. the chain of trust or signing chain). Including the signing chain
increases the size of the certificate, which slightly increases the amount of time and traffic
volume required to transmit the certificate each time to FortiWeb. Instead, upload those CAs’
certificates to the FortiWeb appliance (see “Uploading trusted CAs’ certificates” on
page 280).