A method for managing a digital certificate, comprising: negotiating (S201, S302), by a digital certificate requesting device, with a digital certificate issuing device by using an acquired authorization code, to establish a security data channel and generate a security key, wherein the security key comprises a data communication key and a data session key; transmitting (S202, S303), by the digital certificate requesting device, a digital certificate management request message to the digital certificate issuing device through the security data channel, wherein the digital certificate management request message is encrypted with the data communication key, and the digital certificate management request message carries certificate request data; receiving (S203) the digital certificate management request message by the digital certificate issuing device, and transmitting (S203), by the digital certificate issuing device, a digital certificate management response message to the digital certificate requesting device through the security data channel, wherein the digital certificate management response message is encrypted with the data communication key; receiving (S204, S304) the digital certificate management response message by the digital certificate requesting device through the security data channel; and processing (S205, S305) the digital certificate management response message by the digital certificate requesting device, to obtain a processing result, wherein the digital certificate management request message is encrypted with the data communication key in a way that: the certificate request data carried in the digital certificate management request message is encrypted with the data session key; and the digital certificate management request message is encrypted with the data communication key in the security data channel. negotiating (S201, S302), by a digital certificate requesting device, with a digital certificate issuing device by using an acquired authorization code, to establish a security data channel and generate a security key, wherein the security key comprises a data communication key and a data session key; transmitting (S202, S303), by the digital certificate requesting device, a digital certificate management request message to the digital certificate issuing device through the security data channel, wherein the digital certificate management request message is encrypted with the data communication key, and the digital certificate management request message carries certificate request data; receiving (S203) the digital certificate management request message by the digital certificate issuing device, and transmitting (S203), by the digital certificate issuing device, a digital certificate management response message to the digital certificate requesting device through the security data channel, wherein the digital certificate management response message is encrypted with the data communication key; receiving (S204, S304) the digital certificate management response message by the digital certificate requesting device through the security data channel; and processing (S205, S305) the digital certificate management response message by the digital certificate requesting device, to obtain a processing result, wherein the digital certificate management request message is encrypted with the data communication key in a way that: the certificate request data carried in the digital certificate management request message is encrypted with the data session key; and the digital certificate management request message is encrypted with the data communication key in the security data channel. the certificate request data carried in the digital certificate management request message is encrypted with the data session key; and the digital certificate management request message is encrypted with the data communication key in the security data channel. <EOS>