See below for adding a key manager to Certificate Manager.