Add a certification authority administrator

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To add a certification authority administrator

  1. Open Certification Authority.

  2. In the console tree, click the name of the certification authority (CA).

    Where?

    • Certification Authority (Computer)/CA name
  3. On the Action menu, click Properties.

  4. Click the Security tab, in Group or user names, confirm that Administrators is selected, and then click Add.

  5. In Permissions for Administrators, type the name of the group or user you want to make a CA Administrator, and then click OK.

  6. In Permissions for Added User or Group, for Manage CA, select the Allow check box.

Notes

  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • To open Certification Authority, click Start, click Control Panel, double-click Administrative Tools, and then double-click Certification Authority.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also

Concepts

Enable role separation
Disable role separation
Add a certificate manager
Role-based administration
Add a certification authority auditor
Add a certification authority backup operator
Access control overview