It is possible to use SCEP for the auto enrollment of devices in the FortiAuthenticator. You can even retrieve CRLs using this method. All you have to do when configuring this on firewall or any other device just use the following URL:
Having trouble configuring your Fortinet hardware or have some questions you need answered? Ask your questions in the comments below!!! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!