Added back cert generation -- can't copy certs b/w machines