update certs / provisioning