On a 9800 pair configured for Stateful Switchover High Availability (HA SSO), all certificates are replicated from the primary to the secondary at initial bulk-sync. This includes certificates where the private key was generated on the controller itself, even if...