To use the Delegated Admin certificate upload feature, you must first enable the feature. You can use the PingData administrative console or dsconfig to perform this task.

For more information, see:

After you've enabled the feature, it’s ready to use when creating a new user or when editing an existing user. To use the enabled certificate upload feature, see Uploading a certificate to a user REST resource type profile in Delegated Admin.