What is a guideline for managing local certificates on an ArubaOS-Switch?

What is a guideline for managing local certificates on an ArubaOS-Switch?
A . Before installing the local certificate, create a trust anchor (TA) profile with the root CA certificate for the certificate that you will install
B . Install an Online Certificate Status Protocol (OCSP) certificate to simplify the process of
enrolling and re-enrolling for certificate
C . Generate the certificate signing request (CSR) with a program offline, then, install both the certificate and the private key on the switch in a single file.
D . Create a self-signed certificate online on the switch because ArubaOS-Switches do not support CA-signed certificates.

Answer: C