Enabling Client Auth EKU on Catalyst 9000 IOS XE 17.9.5

[Joshua-McDowell]

Hello,

I am attempting to establish TLS syslogging in my environment, and I am somewhat unfamiliar with the intricacies of certificates. This page (https://community.cisco.com/t5/networking-knowledge-base/configuring-syslog-tls-on-catalyst-9000/ta-p/4664499) and this page (https://community.cisco.com/t5/networking-knowledge-base/creating-a-csr-authenticating-a-ca-and-enrolling-certificates-on/ta-p/4436090) Have been incredibly helpful, but I am unable to figure out how to specify for my client certificate to have Client Auth EKU. I am not sure if it is something that needs to be done on the CA, or on the switch with the CSR request or import step.

Any help is appreciated.

Josh