AEP (Auto Enrollment Proxy) is a Proxy for Windows Domain-Controller environments, that acts as an Microsoft Enterprise CA for the Domain, and forwards the requests to a CA like CAcert.
http://directory.fedoraproject.org/wiki/Windows_Certificate_Auto_Enrollment