The Certificate Management console runs on the same computer that hosts the Control Compliance Suite Directory. The Certificate Management Console lets you create, renew, revoke, or delete the certificates that the Control Compliance Suite uses. Certificates allow components to communicate securely in domains with no trust relationship. Certificates also enhance communications security within domains or between domains with a trust relationship. The Directory Server, Application Server, and Data Processing Service always require certificates.
The Certificate Management console must use a valid certificate to manage other certificates. The Control Compliance Suite Console relies on Active Directory for security. The Control Compliance Suite Console does not rely on certificates for security. Because it has no certificate, the Control Compliance Suite console cannot manage other certificates. For the Control Compliance Suite console to manage certificates, all copies of the console would require a certificate.