What does a Trusted Agent do with PINs they received from the RA/LRA?

• A. Store the PINs to a GSA approved safe
• B. Distribute the PINs to the subscriber
• C. Distribute them to authorized personnel that isn't the subscriber
• D. Use them for testing purposes

Answer: (B)

PINs are the subscriber’s secret credentials tied to their certificate, used to unlock or activate it. The Trusted Agent’s job is to get that secret into the hands of the person who will use the certificate—the subscriber—so they can securely access their private key and perform certificate-related actions. Delivering the PIN to the subscriber ensures only the intended recipient can use it, preserving confidentiality and control.

Storing PINs or routing them to others would increase risk and undermine security. Using PINs for testing defeats their purpose and could expose the subscriber’s credentials. Therefore, the proper action is to provide the PIN directly to the subscriber so they can securely activate or manage their certificate.