eForm TLS requirements
See below the requirements to manually issuing TLS certificates with eForm TLS.
TLS certificate profiles
You need an issuing subordinate CA with at least one profile of the privatessl set.
ℹ See Creating an issuing subordinate authority for how to create a CA and select profiles.
User roles
Grant the following roles to the users who will perform the different operations.
| Role | Authorized operations |
|---|---|
| Enrollment Workflow Administrators | eForm TLS requirements |
| Owners | All |
| Enrollment Workflow Auditors | Auditing enrollment events |