Roles and Privileges - dogtagpki/pki GitHub Wiki

Privileged User Roles

  • Administrators: Users who can perform any administrative or configuration task for a subsystem.

  • Agents: Users who perform PKI management tasks, like approving certificate requests, managing token enrollments, or recovering keys.

  • Auditors: Users who can view and configure audit logs.

Bootstrap User

Bootstrap user is special user automatically created at time of installation. This user possesses all role user privileges.

Trusted Managers

Trusted Managers is a special group used for inter-CS communication.

  • CA → KRA

  • TPS → CA, TPS → TKS

  • An RA (Registration Authority) is an extension for the CA given to an external entity that handles its own authentication and can act on behalf of the users that it governs to submit requests to the CA

Non-Role Users/Entities

  • EE: End-entity users who have no privileges in the realm of RHCS system.

Tip
 To find a page in the Wiki, enter the keywords in search field, press Enter, then click Wikis.
⚠️ **GitHub.com Fallback** ⚠️