Azure expansion hsm emulator

I'm working with a STM32F4 Discovery (413) eval board and working through bringing the device up on Azure IoT hub through various mechanisms. I've successfully (the firmware does not like being talked to from a Mac serial port, i've only had success using Windows TeraTerm for the interactions) registered the device with shared keys, and CA Certificates. Next is to use the Device Provisioning Service (DPS). According to the readme.txt in the package

By contrast to the direct X.509 authentication to the hub, the DPS allows the device to generate
 its own authentication certificate and to get it signed by the "test root CA" which is embedded
 in the HSM emulator of the Azure C SDK.

I however do not see anything regarding any certificates anywhere in the code tree. Can someone point out where this might be found.