Dear TRN, It works for me with (C9800-40, V17.6.4) older versions were a nightmare. Easiest way was by importing a PKCS12 wildcard Certificate including the CA Chain. You can do this by uploading your wildcard certificate via: Configuration->PKI Man...