Certserver.kra.connector; Certserver.kra.generatekeypair; Certserver.kra.gettransportcert - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

Appendix D. ACL Reference
Operations Description
modify Modify automatic key recovery archive configuration, agent passwords, and notification requests in queue
Table D.53. certServer.kra.configuration ACL Summary
D.4.4. certServer.kra.connector
Controls what entities can submit requests over a special connector configured on the CA to connect
to the DRM. The default configuration is:
allow (submit) group="Trusted Managers"
Operations Description
submit Submit requests from remote trusted managers.
Table D.54. certServer.kra.connector ACL Summary
D.4.5. certServer.kra.GenerateKeyPair
Controls who can submit key recovery requests to the DRM. The default configuration is:
allow (read,submit) group="Data Recovery Manager Agents"
Operations Description
read View key recovery request information.
submit Submit or initiate key recovery requests through the agent services pages.
Table D.55. certServer.kra.GenerateKeyPair ACL Summary
D.4.6. certServer.kra.getTransportCert
Controls who can submit key recovery requests to the DRM. The default configuration is:
allow (modify,read) group="Enterprise CA Administrators" || group="Enterprise KRA
Administrators" || group="Enterprise OCSP Administrators" || group="Enterprise TKS
Administrators" || group="Enterprise TPS Administrators"
Operations Description
modify Update the transport certificate for the DRM.
read View or retrieve the transport certificate for the DRM.
Table D.56. certServer.kra.getTransportCert ACL Summary
512