If you are using Certificate Enrollment Gateway with an on-premises CA, you can use native Linux tools to create a CSR (certificate signing request) for the Certificate Enrollment Gateway certificate, then use your existing CA tools to process the CSR and create the certificate.

• Creating or recovering a user account in an on-premises CA
• Processing the CSR with an on-premises CA
• Obtaining the CA certificate chain