Key managers generate key pairs and certificate signing requests (CSRs) for certificate authorities to issue certificates.