From Firebox System Manager, you can export a certificate from your Firebox or XTM device.
If you use Fireware XTM Web UI, you must install WatchGuard System Manager before you can use Firebox System Manager to export certificates.
The exported certificate is saved in PEM format. For some certificate distribution methods, the preferred certificate format for import is the DER format. For instructions on how to convert the PEM format certificate to DER, see Convert Certificate Format.
To export a certificate:
When you use Firebox System Manager to create a certificate-signing request, your Firebox or XTM device also creates a private key. It is not possible to export this private key from your device. If you want to use the server certificate for a different device, you must have this private key to import the certificate. For an alternate method to create a certificate-signing request and private key, see Create a CSR with OpenSSL.
Manage XTM Device Certificates