I'm currently a trainee, and I am assigned to do a task where I have to find out whether it is possible if a switch can get its certificate by contacting the TACACS-Server.
To explain what I'm trying to say, I will describe my situation.
My company is currently accessing all switches on remote locations via Telnet (which is of course insecure). It is planned to switch to SSH. But because the switches are not in secured locations, my company doesn't want to keep the certificates for SSH on the switch itself, but on the TACACS server, and when logging into the switch, the switch gets the certificate from the server to authenticate. We're currently using TACACS for default authentication.
Is it possible that the switch can get the certificate from the TACACs server?