When configuring the IPSec VPN certificate authentication method, if you choose the "RSA signature" authentication method, which of the following steps need to be configured? (Multiple choice)

When configuring the IPSec VPN certificate authentication method, if you choose the "RSA signature" authentication method, which of the following steps need to be configured? (Multiple choice)
A . Upload the CA certificate
B . Upload the local certificate
C . Upload the peer device certificate
D . Create a public-private key pair for the local device

Answer: ABC