We are still in the testing phase so they haven't been deployed yet. When we do that, we will use Desktop Central by ManageEngine. Deploying the beat is the easy part. Getting all the unique certificates in place is the tough part. Desktop central doesn't manage certificates.