Whenever you create a PKI certificate you connect it a certificate authority system. Anytime a person uses the certificate, it is authenticated against the CA system. In cases where as certificate has not been assigned to a CA system, there can be user access issues. For example, you may not be able to open and log into an online web application because the certificate is unable to be authenticated.
A PKI Certificate Can be Distributed Using Different Methods
There are various methods available to help you distribute a PKI certificate. One method is to accept requests from user to have a certificate created. This process gives you the ability to approve and deny requests as you see fit. Another method, which is typically used when rolling out a new certificate, is to create certificates for all of your current users and distribute them through email or other electronic means.