Navigate to Network > Sangfor/IPSec VPN > General Settings > Certificate Request. On the CSR page, click Add to enter the Add CSR dialog box, as shown in the following figure.

The parameters are described as follows:

Name and parameters in the Subject and Others sections: Set the parameters based on your requirements.

Standard: You can select RSA.

Key Length: Options include 1024, 2048, and 4096.

Digest Algorithm: Options include SHA 1 and SHA 2.

Click OK. A CSR file and a key file will be generated. You can click Download to download the CSR file. Only offline Certificate Signing Requests (CSRs) are supported.