Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
What privileges are required for Certificate Authority agent account provided by Active Directory cartridge
Description
Starting with Active Directory cartridge version 5.7.1, a new agent is introduced to monitor Certificate Authoirty (CA) status. What privileges are required for this agent account for successful monitoring?
Resolution
As documented in Release Notes:
In order to run remote scripts, a Certificate Authority agent requires an account with relevant privileges:
If the Certificate Authority server is a member server then agent account needs to be member of Domain Admins group.
If the Certificate Authority server is a Domain Controller then the agent account needs to be member of either Domain Administrators group or Domain Admins group.
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to Quest Support
You can find online support help for Quest *product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
The Quest Software Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.