The CRMFPopClient utility is a tool to send a Certificate Request Message Format (CRMF) request to a Certificate System CA with the request encoded with proof of possession (POP) data that can be verified by the CA server. If a client provides POP information with a request, the server can verify that the requester possesses the private key for the new certificate.
The tool does all of the following:
Has the CA enforce or verify POP information encoded within a CRMF request.
Makes simple certificate requests without using the standard Certificate System agent page or interface.
Makes a simple certificate request that includes a transport certificate for key archival from the DRM.