SChannel SSP
Client certificate
Œ
Server
Certificate Storeof Trusted CAs
1. Verify user certificate based on trusted CA, CRL