3.1.1.4.3.3 Enroll on Behalf of Certificate Requests

  • Article

The Enroll On Behalf Of (EOBO) proxy process is used when the client that sends a certificate request requests a certificate on behalf of another end entity.

When sending a ROBO for another entity, clients MUST use the CMS structure with an embedded PKCS #10 certificate request, as specified in [RFC3852] and [RFC2986], or clients MUST use the CMS structure with an embedded CMC request format, as specified in [RFC3852] and [RFC2797]. Clients MUST follow the specific requirements defined in the following sections.