This step must be performed on the system where the NSS server will run.
The procedure for installing a digital certificates on a SAF key ring to be used by the NSS server is similar to the procedure used for installing a digital certificate on a SAF key ring for use by the native certificate service. For details, see IPSec certificate management.