Renew an externally signed certificate for a VPN Gateway element Steps Create a certificate request. Sign the certificate with the external CA. Import the signed certificate.