Table of Contents
Advertisement
Chapter 6. RA: Requesting and Receiving Certificates Locally
6. Select the reason that the certificate is being revoked, and then confirm the revocation.
6.5. Creating and Managing Users and Groups for an RA
When an RA is first created, certain default users and groups with default roles are created
automatically. An initial user, admin, is created with both agent and administrator roles, and two
groups are created to identify agent and administrator users. Additional users and additional groups
can be added to manage the RA subsystem and PKI operations.
The RA uses web-based services pages to services page for the RA, so, like the TPS, administrative
tasks like managing users and groups are carried out through the RA web services pages.
There is a division between agent tasks and administrative tasks, even though both sets of functions
are accessed through web services pages. RA agent tasks manage operations related to issuing
certificates, like approving requests. RA administrator tasks relate to managing the server instance,
mainly managing users and groups.
6.5.1. Managing RA Groups
By default, the RA has administrator and agent groups. Other groups can be configured, depending on
the local demands of the PKI and network, and then the new group can be assigned to function as an
administrative or agent group.
A user can perform tasks based on what groups he is a member of. An RA agent, for example, must
belong to the RA group to perform agent tasks.
6.5.1.1. Listing Groups for an RA
1. Open the RA services page.
https://server.example.com:12889/services
2. Click the Administrator Services link.
3. Click the List Groups link.
4. There are two default groups, for agents and for administrators. To view the details about any
group, click the GID of the group.
70
Advertisement
Table of Contents
