Raritan Dominion KX II User Manual page 236

Note: The CSR and the private key file are a matched set and should
be treated accordingly. If the signed certificate is not matched with
the private key used to generate the original CSR, the certificate will
not be useful. This applies to uploading and downloading the CSR
and private key files.
2. Send the saved CSR to a CA for certification. You will get the new
certificate from the CA.
To upload a CSR:
1. Upload the certificate to the KX II by clicking Upload.
Note: The CSR and the private key file are a matched set and should
be treated accordingly. If the signed certificate is not matched with
the private key used to generate the original CSR, the certificate will
not be useful. This applies to uploading and downloading the CSR
and private key files.
After completing these three steps the KX II has its own certificate that is
used for identifying the card to its clients.
Important: If you destroy the CSR on the KX II there is no way to get
it back! In case you deleted it by mistake, you have to repeat the
three steps as described above. To avoid this, use the download
function so you will have a copy of the CSR and its private key.
Chapter 9: Security Management
227