Ideally, the user or the end device carries the corresponding certificates "on their person" (e.g. on a smart card) in order to have them ready for upcoming digital transactions, such as authentication processes.

This is not possible in some scenarios, or there are boundary conditions that make it difficult to use certificates in practice. One example is virtualized desktops, where the use of a physical smart card is associated with unacceptable performance losses. And not all end devices are suitable for connecting a smart card or token .

In addition, the logistics of using physical smart cards and tokens in large organizations are time-consuming and cost-intensive.