3.2. Profile Operations Performed by CA Agents

Certificate Authority agents review profile requests and may consequently take any of the following actions:

Approve the request.: The certificate is issued, and the end entity then retrieves and uses it.
Reject the request.: No certificate is issued. The end entity is notified that the request was rejected for the reasons specified by the agent. The end entity can also view the request status using the CA's end entities page.
Cancel the request.: No certificate is issued. The end entity is notified that the request was canceled for the reasons specified by the agent. The end entity can also view the request status using the CA's end entities page.
Update the request.: The agent has the authority to change the certificate request to ensure that the request follows the policies that have been set. For example, the agent may change the values for certificate extensions.
Validate the request.: This checks that the output of the request conforms to the constraints defined in the profile.
Assign the request.: The certificate request is transferred to another agent for approval.
Unassign the request.: This removes the certificate request from an agent's queue.

Enrollment requests are submitted to a certificate profile and are subject to the defaults and constraints set up in that certificate profile, regardless of whether the request was created from the input form associated with the certificate profile or the request was created elsewhere and submitted preformatted.