Figure 16 – Certificate Pull Management Workflow
Table 21 – Certificate Pull Management Workflow Steps

The workflow described in figure and table assumes that there is just one connect of the pull client to the server for all CertificateGroups.

The Application authentication with the Certificate signed by the CertificateManager should only work if the application connects with a certificate that is valid on the context of a CertificateGroup. Therefore the creation of different certificates for one CertificateGroup should work with one conneciton.

But the handling of multiple CertificateGroups with one connection should not work with this Application authentication.

Therefore the loop for multiple CertificateGroups would require a new conneciton for each CertificateGroup.