====== private: management ====== complete control of the device certification