Currently in the process of configuring a CSM for SSL termination, and must admit I'm a little confused. I've recently set up some CSS' with SSL and the process for configuring these devices appears to be far simpler than the CSM.

For the CSM config, am I able to, in effect, mirror the CSS configuration. Eg create the key pair, and send this along with the CSR to an internal development CA for signing, and simply import the certificate I receive back.

Looking at configuration notes, I need to create Trustpoints, and have the CSM talk to the certificate authority, which is a little too complex for what I'm hoping to achieve.

TIA