What should you do to manage certificate settings on all machines in a domain from one main location?