Designed to control private keys and certificates of CA users, to make and verify signatures, to protect user data