Create a user account (say, cfServiceCA), on behalf of which the system shall e.g. cfServiceCA) that will be used by the system to request user certificates in from the Certification Authority and set the rights (CA) and grant this account permissions to work with certification authority for this accountthe CA:
1. Open the Certification Authority tool, select the certification authority CA and switch to its Properties.
2. Click Add... in the Security tab.
3. Specify the service account (cfServiceCA) as the user.
4. Define the Issue and Manage Certificates and Request Certificates permissions for the account and save settings by clicking click ОК.
| Warning |
|---|
If you have more than one certification authority CA in your environment, then one and the service account must be granted the same set of privileges is to be assigned to the service account for all certification authoritiesCAs. |
