eForm requirements
The sections below describe the requirements for manually issuing TLS certificates with eForm.
TLS certificate profiles
You need an issuing subordinate CA with at least one profile in the privatessl group.
See Creating an issuing subordinate authority to create a CA and select profiles.
User roles
Grant the following roles to the users who will perform the different operations.
| Role | Authorized operations |
|---|---|
| Designing reports | ❌ |
| Manually generating reports | ❌ |
| Downloading reports | ✔ |
| Disabling and re-enabling reports | ❌ |