You require the use of a signed certificate for your environment which will require the import of a 3rd party CA certificate and the generation of a certificate signing request (CSR) in DCS 6.7 MP1
DCS 6.7 MP1
The attached document has the steps for importing the CA, generating the CSR, importing the signed certificate and regeneration of subordinate certificates.