Since ME 8.1 there is a possibility to export a certificate to a device and bind it to specific security client. Keystore Manager>Export Key dialog should support this feature.

This is similar to old (before NB 8.0) functionality when exported certificate was bound to security domain.

So, following should be done in Export Key dialog:
1. Check if binding exported certificate to security client is supported. In case if it is not supported the dialog should work in the same way as in NB 8.0
This check can be performed by running mekeytool.exe without parameters, parse its output and looking for "-clients" string there.
   
2. If check in the previous step completed succesfully ("-clients" string was found), the new combo box to select security client should be shown (similar to combo box in NetBeans before 8.0 release). 
Note, that it is possible to export certificate unbound to a security client, in this case the certificate is treated as shared. This case should be also covered (e.g., by additional checkbox that enables/disables the security client combobox, or by special addtional item in the combobox). 
To export certificate with selected security client to device or to list certificates in devices with selected security client, additional "-client <name>" option of mekeytool.exe should be used. In case of no security client is selected "-client" option must not be used. Other command line arguments of mekeytool.exe are the same as used in NB8.0 The list of available security clients can be obtained by "meykeytool.exe -clients" command.

The nightly builds of MESDK 8.1 that supports this functionality can be found at usual place.