How do I replace a default CA Embedded Entitlements Manager (EEM) certificate with my own p12 certificate?