There is a command group 'az_sphere_device_certificate'. This group of commands could 'manage certificates on the attached device'. The group of commands has global parameter '--debug' which means 'Increase logging verbosity to show all debug logs.'. The group of commands has global parameter '--help -h' which means 'Show this help message and exit.'. The group of commands has global parameter '--only-show-errors' which means 'Only show errors, suppressing warnings.'. The group of commands has global parameter '--output -o' which means 'Output format.'. The group of commands has global parameter '--query' which means 'JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples.'. The group of commands has global parameter '--subscription' which means 'Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`.'. The group of commands has global parameter '--verbose' which means 'Increase logging verbosity. Use --debug for full debug logs.'. This group contains a child command 'az_sphere_device_certificate_add'.The syntax is: az sphere device certificate add --cert-type {client, rootca}
                                 --certificate
                                 --public-key-file
                                 [--device]
                                 [--private-key-file]
                                 [--private-key-password]. The 1th example of the child command would be to use it to 'add a rootca certificate on the attached device', the syntax is: az sphere device certificate add --certificate certSample --cert-type rootca --public-key-file pubcert.pem. The 2th example of the child command would be to use it to 'add a client certificate on the attached device', the syntax is: az sphere device certificate add --certificate certSample --cert-type client --public-key-file pubcert.pem --private-key-file privkeycert.pem --private-key-password 1234. The parameter '--cert-type -t' is required. It is used to the type of certificate to add. "rootca" - a root ca certificate for use with eap-tls networks where the device authenticates the server. "client" - a client certificate, containing both the public and private key, for use with eap-tls networks. please see: https://aka.ms/azurespherecertificatestore for more details.. The parameter '--certificate -c' is required. It is used to the name of the certificate to add.. The parameter '--public-key-file -p' is required. It is used to the path to a public key certificate .pem file. you can provide a relative or absolute path.. The parameter '--device -d' is optional. the device to run the command on when multiple devices are attached. specify the id, ip address, or local connection id of an attached device.. The parameter '--private-key-file' is optional. the path to a client private key .pem file. required when adding a certificate of type "client". you can provide a relative or absolute path.. The parameter '--private-key-password -w' is optional. password for the client private key. required when adding a client private key that is encrypted.. 