Configuring Microsoft Certificate Server for Use with KM Server

You can use Certificate Server to issue, revoke, and renew certificates that can be used for client authentication. Certificate Server can be deployed in the following ways depending on how you use security in your organization:

As a Web client that KM server can use to communicate with a CA.
As a stand-alone CA.
As a subordinate CA that is dependent on a CA to sign the certificates it issues.