Yes, you will need to generate a Certificate Signing Request and get valid, signed certificates from a CA (Certificate Authority). This will allow you to setup the traversal zone between the core and edge. You'll need to make sure that once you have the certificates, you upload the root and intermediary certificates, as well as the identity certificate from the CA into the certificate stores of the core and edge server.
