To configure local CA
In the AMC, navigate to System Configuration > SSL Settings.
In the CA Certificates section, click the + (New) icon.
Select Local CA to create local CA Certificate.
In SubjectCN enter the CA value.
In the Key type drop-down, select the key type based on your requirement. The supported key types are RSA and EC.
In the Key size drop-down, select the key size based on your requirement. The supported key sizes are 2048, 3072, and 4096 bits.
In the Signature drop-down, select the Secure Hash algorithm based on your requirement. The supported signatures are SHA 512, SHA-384, and SHA-256.
Click Save.
Refer to the Configuring Device VPN section for more details of the list of enrolled device certificates.