In SSH Tectia Certifier, all end-entity actions are performed via Enrollment Services running on Certifier Server instance(s). These services perform the message-transport-related server-side functionality of certificate enrollment or certificate life-cycle management.
There is a dedicated Certifier Service for each protocol:
SCEP Service for enrollment services for VPN applications such as routers and software clients.
CMP Service acting as a certificate life-cycle management server.
Web Enrollment Service for a web-based enrollment interface.