Hi,
I recently tried to do that also. But without a CA.
With only a Self-Sign Root CA and a client certificate signed with this root CA.
It’s not the best way, but an easy way to get it done.
First, in Windows 10 with Powershell, generate a Root CA cert.
$cert = New-SelfSignedCertificate -Type Custom -KeySpec Signature -Subject "CN=MerakiRootCert" -KeyExportPolicy Exportable -NotAfter (Get-Date).AddYears(15) -HashAlgorithm sha256 -KeyLength 2048 -CertStoreLocation "Cert:\CurrentUser\My" -KeyUsageProperty Sign -KeyUsage CertSign

Don’t close your Powershell
This Self-sign root CA certificate will be stored in your user personal store.
Now export it on your desktop in Base64 format. No need to export private key.


Then Upload it on your Dashboard

Now
Create a client certificate signed by the Self-sign root ca.
New-SelfSignedCertificate -Type Custom -DnsName MerakiChildCert -KeySpec Signature -Subject "CN=MerakiChildCert" -NotAfter (Get-Date).AddYears(15) -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -CertStoreLocation "Cert:\CurrentUser\My" -Signer $cert -TextExtension @("2.5.29.37={text}1.3.6.1.5.5.7.3.2")

That it.
If you want to deploy the certificate to other computers, you can export it and import it manually or with a GPO.
Regards,