The primary EPM uses the default identity certificates to act as a certificate authority for the Experience Portal servers. The primary EPM uses the EP signing certificate to issue and sign identity certificates for all the Experience Portal servers.