DeviceLock Consoles and Tools : DeviceLock Certificates
  
DeviceLock Certificates
DeviceLock Certificate is a cryptographic certificate that consists of two keys (a key pair) - private and public:
The private key must be stored on the administrator’s computer and only the administrator must be able to access it. Also, the private key may be installed on DeviceLock Enterprise Server and DeviceLock Content Security Server.
 
Note: Make sure that non-administrative users can’t get access to the private key.
The public key is installed on every computer where DeviceLock Service is running. If the public key has not been installed on the user’s computer, there is no way to use Temporary White List function or DeviceLock Certificate-based authentication for DeviceLock Enterprise Server and DeviceLock Discovery.