I have the same question.
I once got an answer that there should be a certificate installed but never got any real example. The answer was: "you would need to have all the other certificate settings in place as well. For this is part of the certificate enrollment and identification"