ates-and-key-into-the-cluster>Plug in certificates and key into the cluster</h2><div><aside class="callout tip"><div class=type><svg class="large-icon"><use xlink:href="/v1.8/img/icons.svg#callout-tip"/></svg></div><div class=content>For production cluster setup, it is a good practice to do the following on an offline machine with good
security protection. The root private key should be exposed to as few people and processes as possible.</div></aside></div><ol><li><p>Create a directory for holding certifica