In a WSTEP integration architecture, a Windows enrollment client can connect to a Domain Controller through the Certificate Enrollment Policy Web Service and request certificates from multiple Certification Authorities (CAs).

The following diagram shows a WSTEP integration architecture with Entrust Certificate Enrollment Gateway.

The following topics describe the components in the WSTEP integration architecture:

• Enrollment clients
• Certificate Enrollment Policy Web Service
• Domain Controller
• Cross-forest trust
• Entrust Certificate Enrollment Gateway
• Entrust CA Gateway
• Certificate Authority