Certificate Management over CMS

The Certificate Management over CMS (CMC) is an Internet Standard published by the IETF, defining transport mechanisms for the Cryptographic Message Syntax (CMS). It is defined in, its transport mechanisms in.

Similarly to the Certificate Management Protocol (CMP), it can be used for obtaining X.509 digital certificates in a public key infrastructure (PKI).

CMS is one of two protocols utilizing the Certificate Request Message Format (CRMF), described in, with the other protocol being CMP.

The Enrollment over Secure Transport (EST) protocol, described in, can be seen as a profile of CMC for use in provisioning certificates to end entities. As such, EST can play a similar role to SCEP.