Figure 3: The asymmetric PKINIT exchange minimizes the amount of messages required to establish an IPSEC Security Association between the CMS and MTA.