This is the first part for ticket https://pagure.io/dogtagpki/issue/2757 need CMC enrollment profiles for system certificates This first part supports non-TMS (CA, KRA, and OCSP) cmc requests for system certs. Please see comments and code in patch for details. Usage examples can be found here: http://pki.fedoraproject.org/wiki/PKI_10.4_CMC_Feature_Update_(RFC5272)#E... The 2nd part (TMS) will be submitted soon. thanks, Christina