cert/setup update