Generate an X.509 Certificate (with a WebID watermark) that's managed by host operating system keystore: Safari (on Mac OS X Only)

Set up an X.509 certificate issuer and HTTPS listener.
Set up X.509 Certificate Service.
Go to the ODS home page (local or remote) and register new user (or log in as existing ODS user):
Post registration you end up with an ODS generated Person Entity Identifier (an HTTP URI that Identifies "You") that takes the form:
```
http://cname/dataspace/person/user-name#this
```
Edit your profile (Note: If this step is skipped, the resulting X.509 certificate will not have a human readable name):
Go to Profile Edit -> "Security":
Go to "Certificate Generator":
Complete the certificate details for the user:
Click "Submit Certificate Request" to generate the certificate.
The Mac OS X key chain is automatically loaded with the new certificate loaded:
The certificate is "untrusted" in the key chain by default and needs to be set to trusted by.
Specify Certificate details:
Right Click on the certificate name and select the "Get Info" item:
Expand the tree of the "Trust" item on the left:
Set the "when using this certificate" drop down to "Always trust":
Enter the password for the user account to authorize the trust change in the key chain:
Right click on the certificate again and select the "New Identity Preference" to the secure HTTP address of the ODS server for ex. https://id.myopenlink.net/ods and click "Add":
Go to the "X.509 Certificates" tab of the ODS user account and click on the "Edit" button of the generated certificate:
Select the "Enable Automatic WebID Login" checkbox and click "Save Certificate" to enable WebID access of this user:
Log out and access for ex.: https://id.myopenlink.net/ods.
Select when prompted from your browser, the certificate generated from above.
The WebID login for the selected user certificate will be presented to enable secure login:
Perform an WebID based ACL Sharing of a resource to the user with the generated from above X.509 hosted WebID.