To publish the issued certificates in Active Directory, you need one or more RA (Registration Authority) enrollment agents. See below for the supported credential generation modes.

• Creating RA enrollment agent credentials in a keystore file
• Creating RA enrollment agent credentials in a PKCS#11 HSM