B51 Configuration of CA Server Settings

In a CA, a role is assigned to a user by assigning the security settings of the role.

Four Roles can be assigned :

Certificate Manager
Auditor
CA Administrator
Backup Operator

The certificate manager can approve certificate enrollment and revocation requests. This role can be configured by using the Certification Authority snap-in. The Issue and Manage Certificates permission is assigned to this role.

The auditor can configure, maintain, and view audit logs. This role is an operating system role. The Manage Auditing and Security Log permission is assigned to this role.

e CA administrator role can configure and maintain a CA. The CA administrator can renew a CA certificate and assign all the other roles to the users.

This role is a built-in account in a CA by default and can be configured by using the Certification Authority snap-in. The Manage CA security permission is assigned to this role.

The backup operator can perform system backup and recovery. The Backup Files and Directories and Restore Files and Directories permissions are assigned to this role.

Only the CA administrator and certificate manager roles can be assigned to a user or group using the Certification Authority snap-in.

The CA administrator, members of the Backup Operators group, or users with the same privileges can perform the CA backup process.