‘Set up a certificate authority’ shows ‘Access denied’ in FAS admin console.

‘Set up a certificate authority’ shows ‘Access denied’ in FAS admin console.

book

Article ID: CTX310627

calendar_today

Updated On:

Description

Unable to publish templates on a certificate authority, as Status of ‘Set up a certificate authority’ shows as ‘Access denied’ in FAS admin console.


  

If the FAS was already setup, we could notice similar status for ‘Certificate authority’ under rule.

image.png

 

Resolution

In the certsrv console, under Security tab of CA properties.
Make sure the user has ‘Issue and Manage Certificates’ & ‘Manage CA’ permissions.


image.png


In a typical scenario, where you have a separate UserID for CA admin and FAS admin. Then, FAS admin should be given 'Read' permission in CA properties.
This is required to check the status of CA from FAS admin console.

Problem Cause

If it’s a first time setup, User doesn’t have manage CA permissions.
If the FAS was already setup, manage CA permissions may have been revoked.