1# Introduction to Device Certificate Kit
2
3Device Certificate Kit provides the [certificate framework](#certificate-framework) and [certificate management](#certificate-management) capabilities for developers.
4
5## Certificate Framework
6
7The certificate framework provides APIs for parsing and validating digital certificates.
8
9You can use the APIs to parse and validate a certificate, certificate extensions, and a certificate revocation list (CRL), and validate a certificate chain.
10
11The certificate framework shields the differences between third-party algorithm libraries to make development a more enjoyable experience.
12
13**Scenarios**
14
15The application parses the received certificate or the certificate entered by the user, obtains the basic fields or extension fields of the certificate for display or verification, and uses the CA certificate chain and CRL to verify the certificate validity.
16
17### Working Principles
18
19The system provides the certificate framework, which shields the differences between third-party algorithm libraries. You only need to use the APIs provided by the certificate framework to implement operations on certificates.
20
21![](figures/certificate_framework_architecture.png)
22
23### Related Kits
24
25During the use of certificate framework functionalities, public keys need to be generated and obtained, which depends on [Crypto Architecture Kit](../CryptoArchitectureKit/crypto-architecture-kit-intro.md).
26
27## Certificate Management
28
29The **certManager** module provides system-level certificate management capabilities to ensure certificate security during transmission and storage and prevent unauthorized certificate access and use.
30
31You can use the APIs provided by this module to implement secure management and use of certificates throughout their lifecycle (installation, storage, use, and destruction). You can also install, obtain, use, and uninstall private certificates.
32
33**Scenarios**
34
35- Install a private certificate.
36- Obtain a private certificate.
37- Use a private certificate to generate a signature and verify a signature.
38- Uninstall a private certificate.
39
40### Related Kits
41
42During the use of the certificate management functionalities, certificates need to be installed and used, which depends on [Universal Keystore Kit](../UniversalKeystoreKit/huks-overview.md).
43
44## Constraints
45
46Device Certificate Kit does not provide the capabilities of generating or issuing certificates or CRLs. Such capabilities are implemented by a certificate authority (CA) rather than a single application.
47