This guide explains how to create a Certificate Configuration preset for secure device provisioning, especially for Enterprise Wi-Fi authentication. ArborXR supports two primary certificate types: CA Certificates (trusted root certificates) and User Certificates (client certificates). CA certificates are used to validate the server's identity, ensuring a secure connection to the network. User certificates, often in PKCS 12 format, are used by the server to identify and authenticate the device itself, commonly for methods like EAP-TLS. Certificate Presets support enrollment via both the Static and Dynamic SCEP (Simple Certificate Enrollment Protocol) and EST (Enrollment over Secure Transport) methods, or through PKCS certificate import.