The Certificate is intended for establishing sessions between the Sangfor device and the client. To view the current certificate of or to generate a certificate for the Sangfor device, navigate to SSLVPN > Certificate, as shown in the figure below:

The following are the contents included on the Certificate page:

View: Click it to view the detailed information of the current certificate.

Download: Click it to download the current device certificate.

Update: Click it to import a new certificate to take the place of the current one.

Create CSR for Device: Click this button to generate a certificate-signing request (CSR) sent to the external CA to generate the device certificate. The page is shown in the figure below:

Configure the required fields and then click the OK button.

Once the certificate signing request is generated, click the Download link to download the request.