Certificates can be imported from SNS version 3.9.0 upwards.
Certificates must be in PKCS#12 format (encrypted file that contains the firewall's certificate and its private key). These files must be exported from the workstation that manages the organization's PKI.
If your firewall is equipped with a trusted platform module (TPM) and you wish to protect the private key contained in a PKCS#12 file by sealing it to the TPM, see p12import operation.
The names of PKCS#12 files for a specific firewall consist of the firewall's serial number followed by an optional suffix, and the extension "p12".