A certificate authority is required when you want to create and distribute digital certificates and digital signatures. You have different options for gaining access to this type of system. Some organizations outsource this process to a trusted third party. This method is where the third party creates, distributes and manages certificates on behalf of the company. Other organizations may prefer to purchase their own system and manage the processes in-house.
A Certificate Authority System Can Be Offered as a Service
You will also find companies which use a mixture of both methods, where the certificate authority system is offered as a service. This mixed method is where the software and system are operated and maintained by a trusted third party, offsite. The business accesses the system by connecting remotely. Once connected to the system, they have complete control over creating and managing their certificates.