Create policy for certificate use in educational data.

[Lomilar]

Examples:

• An identity should have a separate signing certificate and identification key. The signing cert is used when making declarations about others, the identification key is provided to systems as the PK to make declarations about.
• Certificates should never be used in PII sensitive areas.

[Lomilar]

Should be based on NIST guidance.