Verifying the accuracy of information included in PKI requests is the responsibility of which role?

• A. Security Auditor
• B. Regional Manager
• C. Subscriber
• D. Trusted Agent

Answer: (D)

Verifying enrollment data and the requester’s identity before a certificate is issued is the job of the Trusted Agent. The TA acts as the gatekeeper between the requester (subscriber) and the Certificate Authority, performing the verification that the information in the certificate enrollment request is accurate and that the requester really is who they claim to be. This includes confirming identity documents or other proof, ensuring the subject name and attributes match the requester, and validating that the provided public key belongs to the requester. This verification is essential to prevent mis-issuance and to maintain trust in the PKI.

A subscriber is the entity seeking the certificate, but the actual checking of enrollment data is done by the Trusted Agent. A security auditor focuses on evaluating security controls and compliance, not the day-to-day verification of certificate requests, and a regional manager is not involved in PKI issuance.