The Token Processing System (TPS) is the conduit between the Enterprise Security Client, the user interface for end users to manage their smart cards, and the other subsystems in the Certificate System. It automatically initiates certificate enrollments with the CA and key recovery through the DRM. It uses the TKS to generate and store master keys used to derive token-specific secret keys.