2.2. Basic Profile Operations for an Agent

A CA agent reviews profile requests and takes any of the following actions:

Approves the certificate request, so the certificate is issued. The end entity then retrieves and uses the certificate.
Rejects the certificate request, so no certificate is issued. The end entity is notified that the request was rejected for whatever reasons are specified by the agent. The end entity can also view the request status on the CA's end-entities page.
Cancels the certificate request, so no certificate is issued. The end entity is notified that the request was rejected for whatever reasons are specified by the agent. The end entity can also view the request status on the CA's end-entities page.
Updates the certificate request. The agent has the authority to change the certificate request to ensure that the request follows the policies that have been set. For example, the agent may change the values for certificate extensions.
Validates the certificate request. Validation tests that the output of the request conforms to the constraints defined in the profile.
Assigns the certificate request, so that the certificate request is transferred from agent to another for approval.
Unassigns the certificate request, which removes the certificate request from an agent's queue.

Enrollment requests are submitted to a certificate profile and are subject to the defaults and constraints set up in that certificate profile, regardless of whether the request was created from the input form associated with the certificate profile or the request was created elsewhere and submitted preformatted.