To install chaincode on a peer, an entity's certificate must be installed on the node (stored in the local MSP) of the peer. Since installing chaincode is a highly privileged operation, care should be taken that only entities with administrative capabilities have the ability to perform this operation.