VSP 9000 does not support generating .CSR (certificate signing request) file, which is necessary for issuing certificate by CA (Certification Authority).
- Install openssl software: https://www.cloudinsidr.com/content/how-to-install-the-most-recent-version-of-openssl-on-windows-10-in-64-bit/
- Generate .CSR and private key in openssl software: https://www.digitalocean.com/community/tutorials/openssl-essentials-working-with-ssl-certificates-private-keys-and-csrs
- Provide .CSR only to CA.
- CA should send back issued certificate.
- Convert certificate to .cert format.
- Install certificate and private key to VSP9K:
- Rename the files to host.cert and host.key.
- Upload the certificate and key files to the /intflash/.ssh/ directory
- Reboot the system and the new certificate loads during the boot-up process.
Note: The system does not validate the expiration date on the certificate and performs no action after the certificate expires. You can either replace the host.cert and host.key files with new files (if the certificate is a user-generated certificate), or delete the host.cert and host.key files, and then reboot the system to load a new certificate after the original certificate expires.