Red Hat CERTIFICATE SYSTEM 8 - DEPLOYMENT Deployment Manual page 70

Chapter 5. Planning the Certificate System
Figure 5.5. How Certificate System Manages Smart Cards
To use the tokens, the Token Processing System must be able to recognize and communicate with
them. The tokens must first be enrolled to format the tokens with required keys and certificates and
add the tokens to the Certificate System. The Enterprise Security Client provides the user interface
for end entities to enroll tokens.
The token management system is very scalable. Multiple TPSs can be configured to work with a single
CA, TKS, or DRM instance, while multiple Enterprise Security Clients can communicate with a single
TPS. As additional clients are installed, they can point back to the TPS instance without having to
reconfigure the TPS; likewise, as TPSs are added, they can point to the same CA, TKS, and DRM
instances without having to reconfigure those subsystems.
60