I had so many problems in the past setting up certificates and keys that i simply gave up. Now it is completely straightforward and works like a charm. Very nice 
Note that you must set this up under both Settings > Account Policies and also on the individual account profile General tab.