To manage and configure security on the sea you can use the security tab to view the properties of ACA
in the certification authority council.
You can said the following security permissions on ACA.
You can set route permissions.
Lists are security principles that are assigned this permission can locate this C Ian ADT s or access
it by using the Web council or web services.
If you deploy the C as a standalone C it and other security permission is issue and marriage certificates
security principles that are assigned this permission can approve for denies cert to request that an
abandoned state they can also revoke and issue an issued certificate specifically revocation reason
and perform an on revoke the security principals can also read all issued certificates and export them
to files and other permission is managed see security principles that are assigned this permission can
manage and configure all options on the c they can not manage certificates by default but can grant
themselves the right and other right or permission is request certificates.
Security principles that are assigned this permission can perform certificate requests against lists
see.
However this does not mean that they can enroll for a certificate their certificate template controls
the enrollment permissions in addition to defining security permissions on the access control list of
their CEO object.
You can also use the certificate member step on the SCA properties windows to restrict further security
principles containing the issue and marriage certificates permission.
For example if you want to delegated the issue and manage certificates permission for a specific template
you would grant the security principal the issue and manage certificates right on the security tap of
the CIA properties.
The next step is on the certificate manager a step of the CIA properties.
You have to select restrict certificate managers and the last step you have to select the security principal
that you want to restrict and then modify the templates that you want the security principal to manage
by using the certificate manager or step of the C properties.
You can delegated rights to a specific certificate template without giving a security principal the
issue and manage certificates rights on all templates that are published on this year.