Certserver.ca.certificate; Certserver.ca.certificates; Certserver.ca.clone - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Appendix D. ACL Reference
allow (modify,read) group="Enterprise OCSP Administrators"
Operations Description
read View OCSP plug-in information, OCSP configuration, and OCSP stores configuration. List OCSP stores co
modify Modify the OCSP configuration, OCSP stores configuration, and default OCSP store.
Table D.15. certServer.admin.ocsp ACL Summary
D.3.2. certServer.ca.certificate
Controls basic management operations for certificates in the agents services interface, including
importing and revoking certificates. The default configuration is:
allow (import,unrevoke,revoke,read) group="Certificate Manager Agents"
Operations Description
import Retrieve a certificate by serial number.
unrevoke Change the status of a certificate from revoked.
revoke Revoke certificates, or approve certificate revocation requests.
read Retrieve certificates based on the request ID, and display certificate details based on the request ID.
Table D.16. certServer.ca.certificate ACL Summary
D.3.3. certServer.ca.certificates
Controls operations for listing or revoking certificates through the agent services interface. The default
configuration is:
allow (revoke,list) group="Certificate Manager Agents"|| group="Registration Manager Agents"
Operations Description
revoke Revoke certificates, or approve certificate revocation requests.
list List certificates based on a search. Retrieve details about a range of certificates based on a range of seria
Table D.17. certServer.ca.certificates ACL Summary
D.3.4. certServer.ca.clone
Controls access to submit requests to a master CA through the subsystem interface. The default
configuration is:
500