1. Find a certificate with all the attributes needed 2. Specify what attributes are needed when creating a certificate Also create a type/value DB of attribute names.