Certification Authorities

Certification Authorities are listed and managed in the Certification Authorities section. If you have multiple Certification Authorities, you can apply a filter to sort them.

Certification Authorities and certificates are accessed using the same permissions for the Certificates function. Certificates and authorities created during installation, and those created afterward by the administrator, are contained in the All static group. See the list of permissions for more information on access rights.

Click Actions to manage the selected Certification Authority:

•New - Create a new Certification Authority

• Tags - Edit tags (assign, unassign, create, delete).

• Edit - Edit the Certification Authority description.

• Audit Log - View the Audit Log for the selected item.

• Delete - Delete the selected Certification Authority.

• Import Public Key

• Export Public Key - Use this option to back up your Certification Authorities.

• Access Group - A Certification Authority can be moved to another group to become available to users who have sufficient rights for this group.

Filters and layout customization

You can customize the current Web Console screen view:

•Manage the side panel and main table.

•Add filters and filter presets. You can use tags for filtering the displayed items.

How to divide access to certificates and authorities

If Administrator does not want to allow the user John to access ESET PROTECT Certification Authorities, but needs him to be able to work with certificates, the administrator has to follow these steps:

1.Create a new Static Group called Certificates.

2.Create new Permission set.

a.Name this permission set Permissions for certificates.

b.Add a group named Certificates in section Static Groups.

c.In the Functionality section, select Write for Certificates.

d.In the Users section, click Native Users and select John.

e.Click Finish to save the permission set.

3.Move certificates from the All group to the newly created Certificates group:

a.Navigate to More > Peer Certificates.

b.Select the check boxes next to the certificates you want to move.

c.Click Actions > Access Group, select the Certificates group and then click OK.

Now, John is able to modify and use moved certificates. However, Certification Authorities are safely stored out of this user's reach. John will not be able even to use existing authorities (from group All) for signing any certificates.

˄˅