This identifies which entity owns and controls this KMIP certificate policy's settings, such as whether it is managed locally within the UCS domain or by a centralized policy source. An administrator checks this to know whether they can edit the certificate policy's subject fields directly or whether changes must be made centrally. For example, in a centrally managed environment this field would show that the KMIP certificate policy is owned outside the local domain.