2 Overview

OCLM receives certificate requests over HTTPS, validates request payloads, requests certificate issuance or renewal from Operator CA, and returns issued certificate material to the caller.

The service uses local files under /opt/oclm-service for runtime issuer configuration and CMP identity for signature-based trust establishment with Operator CA.