Steps to change/Configure Web Interface Certificate on WSA:
[1] From the webUI under Network (in the top menu)
[2] Select Certificate Management
[3] Under Appliance Certificates Select Add Certificate...
[4] Select Certificate Type (Self Signed Certificate or Import Certificate)
[5]
[5-1] If you select the Self-Signed Certificate:
[5-1-1] complete the fields
Note: The Private key size must be in the range of 2048 to 8192.
[5-1-2] Click Next
[5-1-3] You can Download the CSR (Download Certificate Signing Request...) and Sign it with your organization's CA Server then Upload the Signed certificate and submit
OR
[5-1-4] You can Submit if the current Self-Signed Certificate is appropriated
[5-2] If you select Import Certificate :
[5-2-1] Import Certificate File (PKCS#12 format is required.)
[5-2-2] Type the Password
[5-2-3] click Next
[6] Commit Changes
[7] Navigate to CLI
[8] type certconfig
[9] type SETUP
[10] type Y
Note: When the certificate is changed, administrative users who are currently logged in to the web user interface can experience a connection error and could lose unsubmitted changes. This will occur only if the certificate is not already marked as trusted by the browser.
[11] type 2 to select from available list of certificates
[12] Type the Number of desired Certificate
[13] if you intermediate certificate, and want to add them Type Y else type N
Note: if you need to add the intermediate certificate you have to paste the intermediate cert in PEM format and end with '.' (just dot).
[14] commit changes
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++
