+<dt><span class="term">PLC_ROOT_CA_SSL_KEY</span></dt>
+<dd>
+<p>
+ Type: file</p>
+<p>
+ Default: /etc/planetlab/root_ca_ssl.key</p>
+<p>The SSL private key used for signing all other
+ generated certificates. If non-existent, one will be
+ generated.</p>
+</dd>
+<dt><span class="term">PLC_ROOT_CA_SSL_KEY_PUB</span></dt>
+<dd>
+<p>
+ Type: file</p>
+<p>
+ Default: /etc/planetlab/root_ca_ssl.pub</p>
+<p>The corresponding SSL public key.</p>
+</dd>
+<dt><span class="term">PLC_ROOT_CA_SSL_CRT</span></dt>
+<dd>
+<p>
+ Type: file</p>
+<p>
+ Default: /etc/planetlab/root_ca_ssl.crt</p>
+<p>The corresponding SSL public
+ certificate.</p>
+</dd>
+<dt><span class="term">PLC_MA_SA_NAMESPACE</span></dt>
+<dd>
+<p>
+ Type: ip</p>
+<p>
+ Default: test</p>
+<p>The namespace of your MA/SA. This should be a
+ globally unique value assigned by PlanetLab
+ Central.</p>
+</dd>
+<dt><span class="term">PLC_MA_SA_SSL_KEY</span></dt>
+<dd>
+<p>
+ Type: file</p>
+<p>
+ Default: /etc/planetlab/ma_sa_ssl.key</p>
+<p>The SSL private key used for signing documents
+ with the signature of your MA/SA. If non-existent, one will
+ be generated.</p>
+</dd>
+<dt><span class="term">PLC_MA_SA_SSL_KEY_PUB</span></dt>
+<dd>
+<p>
+ Type: file</p>
+<p>
+ Default: /etc/planetlab/ma_sa_ssl.pub</p>
+<p>The corresponding SSL public key.</p>
+</dd>
+<dt><span class="term">PLC_MA_SA_SSL_CRT</span></dt>
+<dd>
+<p>
+ Type: file</p>
+<p>
+ Default: /etc/planetlab/ma_sa_ssl.crt</p>
+<p>The corresponding SSL public certificate,
+ signed by the root CA.</p>
+</dd>
+<dt><span class="term">PLC_MA_SA_API_CRT</span></dt>
+<dd>
+<p>
+ Type: file</p>
+<p>
+ Default: /etc/planetlab/ma_sa_api.xml</p>
+<p>The API Certificate for your MA/SA is the SSL
+ public key for your MA/SA embedded in an XML document and
+ signed by the root CA SSL private key. The API Certificate
+ can be used by any PlanetLab node managed by any MA, to
+ verify that your MA/SA public key is valid.</p>
+</dd>