Does istio provide self signed certificates for Ingress Gateway TLS?

From the docs (https://doc.istio.cn/en/docs/tasks/traffic-management/secure-ingress/#configure-a-tls-ingress-gateway), it looks like a certificate has to be provided by the user to enable TLS at Ingress Gateway. Is there a way to have Istio provide self signed certificates (from Istio CA), instead of depending on something like cert-manager (https://doc.istio.cn/en/docs/tasks/traffic-management/secure-ingress/#configure-a-tls-ingress-gateway) for self-signed certificates?