Obtaining Digital Certificates Manually

To obtain digital certificates manually, do the following:

1. Generate a key pair in the device. See Generating a Public-Private Key Pair .
2. Create a CA profile containing information specific to a CA. You can have multiple CA profiles on the device. For example, you might have one profile for Microsoft and one for Entrust. See Configuring a Certificate Authority Profile.
3. Generate a certificate request using the key pair, and manually copy that request and paste it into the appropriate field at the CA Web site to obtain a personal certificate (also known as a local certificate). See Generating a Local Certificate Request Manually.
4. Load the certificate onto the device. See Loading CA and Local Certificates Manually.
5. Configure automatic re-enrollment. See Understanding SecurID User Authentication.
6. If necessary, load the certificate's CRL on the device. See Manually Loading a CRL onto the Device.