Versions 6.x +
Challenge Credentials are Password credentials required to retrieve or revoke a certificate.
The Challenge Credential is given to the certificate authority when the certificate’s CSR is submitted for enrollment. The Certificate Authority subsequently requires the Challenge Credential to retrieve or revoke the certificate.
This is set on a per certificate basis or per policy depending on the Certificate Authority.
In order to be able to set the Challenge Credentials, users require to have at least View permission against the Challenge Credential object.