Under UCC Article 9, which of the following is the primary requirement for a security interest to be 'enforceable' against the debtor and third parties with respect to the collateral (attachment)?