A Certificate Approval Policy makes certificate operations wait for a person: issuing, renewing, exporting with the key, deploying or deleting. It can also refuse an operation outright.
Applies to | Who can do this |
|---|---|
Monopam v2026.10 | Administrators with permission to manage policies. Approvers decide in Requests. |
- Open Policies, click Add New and choose Certificate Approval Policy as the type.
- Choose the operations the policy governs.
- On the Rules tab, say which certificates it applies to (for example by issuer, domain or owner), and whether a match asks for approval or is not allowed. Exceptions exclude certificates.
- Name the approvers and save.
When an operation matches, it stops and a request appears in Requests. Depending on the operation, it either runs by itself after approval, or the operator gets a short window to repeat it.
Related
- Certificate issuers
- Approve and revoke access
- How policies work