Forefront Identity Manager (FIM) provides identity synchronization, user provisioning, certificate and password management and policy management in a single solution that works across heterogeneous systems. (see Forefront Identity Manager 2010 Developer Reference). Forefront Identity Manager Certificate Management (FIM CM) provides functionality to support certificate and smart card management.
Certificate and Smart Card Management with FIM CM 2010
FIM also provides sophisticated credential management features to both Windows Server and 3rd party certification authorities (CAs) by acting as an administrative proxy. Once installed within an organization, all digital certificate and smartcard management functions pass through FIM.