PKI: Certificate authority enrollment: CMPv2

Certificate Management Protocol version 2 (CMPv2) can be used for certificate enrollment and reenrollment. CMPv2 supports RSA, DSA, and ECDSA certificates and is based on RFC 4210, Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP) and RFC 4211, Internet X.509 Public Key Infrastructure Certificate Request Message Format. Based on your deployment environment, you can use either Simple Certificate Enrollment Protocol (SCEP) or CMPv2 for certificate enrollment and reenrollment.