tokens: Device Configuration Manager ( DCM ) : Used to attest to the Enrollment CA ( ECA ) that a device is eligible to receive enrollment certificates , and used as a buffer to provide all relevant configuration settings and certificates during bootstrapping .