Question: In a Network Domain Security (NDS) Authentication Framework, what methods can be utilized for initiating end entity certificate creation on devices, as per operator discretion?
Option 1: CMPv2 protocol for automatic certificate enrolment and manual certificate installation using PKCS#10 formats
Option 2: Only CMPv2 protocol for automatic certificate enrolment, with no provision for manual installation
Option 3: Solely manual certificate installation using PKCS#10 formats, without automated enrolment options
Option 4: Utilizing TLS entities directly for both automatic and manual certificate creation
Explanation: The NDS Authentication Framework allows operators flexibility based on their specific needs. This flexibility includes choosing between automated certificate enrolment via CMPv2 protocol and manual installation using PKCS#10 formats, or potentially a combination thereof, depending on the operational context.