A Silverline "feature" (Certificate keeper) that would be nice to have in F5XC would be an additional way to install a certificate on a load-balancer with F5XC providing a CSR. Steps:

• customer choose this option in the load-balancer form

• they’re prompted to enter the CSR/certificate details (country name, state, ...)

• when the load-balancer is created, they get to download the CSR

• they send the CSR to a CA and receive a certificate in return

• they upload the certificate in F5XC console in the load-balancer settings

This would allow customer to have a custom certificate, without the private key leaving F5XC or their premises at any point in time.