This step must be performed on the system where the NSS server will run.
NSS clients defined in the IKE daemon configuration file must be authorized to use the NSS server's certificate service. For authorization details, see step 7.