Log into the appliance and navigate to Device | Settings | Certificates and click New Signing Request.