A Toaster is a kind of a proxy in an AD (Microsoft Active Directory) environment which implements an Enterprise CA for the AD. This CA answers AutoEnroll requests when creating new users/clients in the AD domain. These requests are then forwarded to CAcert via a secure API. The result is a certificate that is returned to the AutoEnroll process and is stored in the AD.