Certificate Enrollment Web Service allow users, computers, or services to request a certificate or renew a certificate via web browser, even it is not domain-joined or is temporally out of corporate network. If it is domain-joined and in corporate network, they can use auto enrollments or template-based request process to retrieve certificate. This web service will remove the dependencies to use other enrollment mechanisms.