The key management entity (KME) authorized to create the privilege certificate for another KME.
Source(s):
CNSSI 4009-2015
CNSSI 4005