Delegate CA Administration

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Before you begin to issue certificates, you need to delegate CA administrator roles. For information about defining CA administrator roles, see "Defining PKI Management and Delegation" earlier in this chapter.

You can assign CA Administrator and Certificate Manager permissions by using the Certification Authority MMC snap-in. Other roles, users, and groups are specified in the consoles used to perform particular tasks, such as Certificate Templates and Certificates. To change the roles of a user, you must change the security permissions, group membership, or rights of the user.