Indeed Certificate Manager Agent is installed onto user workstations. The Agent allows administrators to assign tasks to your device (USB token or smart card) and execute those in automatic or semi-automatic mode.
The Agent is launched automatically. The logo 
is displayed in system notification area when Agent is active.
The tasks that require user participation are: