Replacing the Configuration utility's self-signed device certificate with a CA-signed Certificate

Hi, As part of vulnerability scan open point in our environment, there is one open point to "install a server certificate signed by a trusted third-party Certificate Authority". Please let me know ...