A Certificate Approval Policy makes certificate operations wait for a person: issuing, renewing, exporting with the key, deploying or deleting. It can also refuse an operation outright.
|
Applies to |
Who can do this |
|---|---|
|
Monopam v2026.10 |
Administrators with permission to manage policies. Approvers decide in Requests. |
-
Open Policies, click Add New and choose Certificate Approval Policy as the type.
-
Choose the operations the policy governs.
-
On the Rules tab, say which certificates it applies to (for example by issuer, domain or owner), and whether a match asks for approval or is not allowed. Exceptions exclude certificates.
-
Name the approvers and save.
When an operation matches, it stops and a request appears in Requests. Depending on the operation, it either runs by itself after approval, or the operator gets a short window to repeat it.
Related
-
Certificate issuers
-
Approve and revoke access
-
How policies work