Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Is role separation supported?

April 26, 2017Separation supported

0

Posted

Is role separation supported?

1 Answer

0

Posted

Windows 2003 and Windows 2008 CAs support the Common Criteria role separation. Several user roles exist to increase the security of the CA. The following roles exist: CA Administrator – Manages the CA and is allowed to configure the certificate templates. CA Manager – Authorizes certificate requests and revokes certificates. The CA manager is allowed to recover private keys. Auditor – Analyses the security event log. Backup Operator – Performs the backup of the CA database, configuration and keys.