Create certificate folder

apt-get install easy-rsa
make-cadir /etc/easy-rsa-legnago
cd /etc/easy-rsa-legnago

Edit vars and

source vars
./clean-all
./pkitool --initca

NAME=legnago-gw
./pkitool --pass --server $NAME
openssl rsa -in keys/$NAME.key -out keys/$NAME.pem

NAME=nms
./pkitool --pass $NAME
openssl rsa -in keys/$NAME.key -out keys/$NAME.pem

Upload and import certificates

/certificate
import file=server.crt
import file=server.pem
import file=ca.crt