Communication Manager allows the certificate file received from CA in PEM format or in PKCS#12 format. There are two methods for Communication Manager to get the identity certificate from CA directory.

• Generate a Certificate Signing Request (CSR) file and submit the CSR file to CA. By using the CSR request, CA issues a signed certificate file in PEM format (no private key contained) or in PKCS#12 format (with or without private key contained).

• Request CA to generate a private/public key pair and the certificate directly and the certificate can only be delivered in a PKCS#12 format file, which contains both of the private and public keys.