You can use globally-signed certificates directly as server identity files. The following diagram shows the configuration for multiple identity files:
You reference the server identity file and the password for the private key on the dbsrv10 or mlsrv10 command line.