CSP: How to work with CA-issued certificates, not self-signed?

Hi people out there. I'm struggling with certificates stuff in CSP, although it's very related to the Tomcat in the background.

I want to use certificates issued by our own CA, not the self-signed. At this point, by modifying the keystore "server-cert.ssl" and server.xml (..\Symantec\Critical System Protection\Server\tomcat\conf\) file I am able to login to the java- and to the web-console, however when I deploy an agent I have an error saying to verify the certificate is correct. Of course the agent.ssl certificate is different, but where can I get this or how can generate it? should I create a new one? which keystore should be used to export this agent.ssl?

Any thoughts, very appreciated.

Thanks,
VikRod