Support Importing CA-Signed Certificates

​Hi @Zyxel_Tina ,
​You have my absolute full support for this! I have just voted.
​I recently submitted a similar feature request specifically for the new GS1200-8 v3, but this is clearly a necessity across the entire Zyxel switch lineup.

​In my environment (and many Prosumer/SMB setups), we use systems like OPNsense as an Internal Certificate Authority and Let's Encrypt for local domain management. Being forced to use hardcoded self-signed certificates completely breaks the Zero-Trust architecture and results in constant browser warnings.

​Supporting the PKCS12 format (to include the intermediate chain) is a brilliant approach. If the WebUI could support either PKCS12 or the standard PEM format (.crt + .key), it would perfectly solve the issue for everyone.

​Please urge the development team to implement this feature, and please consider rolling it out to the entry-level Web-Managed series (like the GS1200 v3) as well, not just the high-end models. Thank you for listening to the community!

However some of Zyxel older or lesser model switches don't support this

The problem is what with this roll on to shorter expiry date certificates the ACME would also be needed. And that makes for some trouble because let say you have a firewall and switch on one WAN IP to do the ACME requires port 80 so how are you going to do that. well there is a way using nginx so that it proxy different domains like

firewall.bridgemode.network proxy 192.168.0.1

switch.bridgemode.network proxy 192.168.0.254

So that as traffic comes in it maps to the LAN side of the firewall or switch IP to do the ACME verifying.

The XGS2220-30HP has the same certificates support as my XS1930 all you need to do is import a .pfx

but there is one import thing you must do as some certificate providers or if you use like win ACME make the .pfx with root, intermediate, certificate and key you only need the certificate and key

so the to do it is if you have a .pfx do

openssl pkcs12 -info -in cert.pfx
or if the above fails with some errors
openssl pkcs12 -info -in cert.pfx -legacy

which you now need to copy the

-----BEGIN ENCRYPTED PRIVATE KEY-----

to

-----END ENCRYPTED PRIVATE KEY-----

in a file cert.key

the the top cert which be your subject=CN copy

-----BEGIN CERTIFICATE-----

to

-----END CERTIFICATE-----

in a file cert.crt

then do

openssl pkcs12 -export -out cert.pfx -inkey cert.key -in cert.crt

then you can import to your switch