3.1.1 Client Mode: Basic Enrollment

The Windows Client Certificate Enrollment Protocol constructs a certificate request as specified in section 2.2.2.6, sends the request to the CA, and retrieves the issued certificate. After the client has obtained the certificate, the client SHOULD store the certificate and its associated private key for later use by applications running on the client machine.<20>

This section specifies the behavior of a client to this protocol that does not use the certificate templates.