Create consumer policy to generate s\mime client certficate

Hi,

I would like to configure my "Symantec Management encryption server" to use S\MIME.

Only for test I have created a self-signed "organizaztion certificate" in the "organization keys". In the production I will use a certificate generated by a trusted CA.

I would like to use the "Symantec management Encryption server" to create and manage the client certificate to use S\mime..
The S\Mime encryption\sign is done on endpoint side.

I want to create "consumer policy" and I don't understand how I have to configure the tab "consumer policy  --> Keys --> Certificates". Is necessary to configure this tab to create a client certificate and use S\MIME?

Thanks

Ciao,

Giovanni