Similar to when we were creating a TrustManagerFactory, this creates a KeyManagerFac tory that will produce KeyManager objects that use the default SSL/TLS algorithms (that is what the getDefaultAlgorithm() method call does) and will utilize our custom keystore— which is set in the call to init() that passes in that keystore—to decide which client certificates to provide to servers that require client-side authentication.