The server submits the certification request to the Certificate Authority (CA).

Based on the approval or rejection of the re-certification request, IBM Tivoli Identity Manager updates the contractor's access rights and the repositories containing that information.

After the ca processes the request, you are issued the certification.