We can manage the Windows certificate registry using a tool called the Microsoft Management Console (MMC).

These system components look for information in a certificate management registry.

Second, if client certificates are to be used, the DN in the client certificate may have to map to a real user in a user registry used by the server.