This figure is a screen capture of the KINIT & PKINIT section of the Authentication Endpoints tab. There are five major sections: Realms, Domains, Encryption, Logging, and PKINIT Trust Anchors. The Realms section consists of a table with two columns, Realm Name and Default. Above the table are 4 buttons: Add, Edit, Remove, and Set as Default. The Domains section consists of a table with two columns: Domain and Realm. Above the table are two buttons, Add and Remove. The Encryption section consists of two fields with drop-down menus: default TKT enctypes and default TGS enctypes. The Logging section consists of two drop-down menus labeled krb5 and KCM. There is an Edit Policy link underneath. The PKINIT Trust Anchors section has an Enable box that is checked. Beneath it is the read-only trust store location, a Choose File button, an Alias field, and an Import button. Beneath that is a table with five columns: Select, Name, Subject Name, Serial Number, and Expires. No Trust certificates are shown in the table. There is also an Edit Policy link beneath the table.