EJBCA Training Manual

SuperAdmin Role

Administrator Role

Introduction

EJBCA Roles - Create Training Superadmin role

Slide Deck: EJBCA Roles

Overview: This section creates the "training superadmin" role, and adds this user to the existing superadmin role.

Slide Reference

Roles-4.png
Create a certificate for the role


Roles-5.png
User is granted access based on role membership


Roles-2.png
Permission matrix by role


Reminder you can visit the Accessing Your Environment page for details on how to connect to your RA web portal

Create the SuperAdmin Certificate

  1. Open a browser and click RA Web, from the ribbon menu across the top of page

  2. Click Enroll >> Make New Request

  3. In the Certificate Type drop-down list, select AdministratorEndEntityProfile

  4. In the Key-pair generation selection, select By the CA

  5. In the CN, Common name field, enter training_SuperAdmin

  6. In the Username field, enter training_SuperAdmin

  7. In the Enrollment code field, enter foo123

  8. In the Confirm enrollment code field, enter foo123

  9. Click Download PKCS#12

  10. Save the file and import it in the browser (see below for a refresher)

Create the Matching Rule

  1. Open a browser and access your Admin Web Portal

  2. Click System Functions >> Roles and Access Rules

  3. On Super Administrator Role click Members

  4. In the Match With list, select X509: CN, Common name

  5. In the CA list, select ManagementCA

  6. In the Match value field, enter training_SuperAdmin

  7. Click Add

  8. Click Back to Roles Management

Refresher on importing certificates into Firefox

Firefox import.png
Import certificate using FF preferences option(s)
  1. Open a new tab in Firefox, and locate the settings using one of the following:

    1. on the address line type about:preferences,

    2. OR

    3. select from the 3 horizontal lines (a.k.a the burger menu) located on the right hand side of the Firefox browser (shown below).

  2. Click on Privacy & Security

  3. Scroll down and click on View Certificates...

  4. Click on Your Certificates tab

  5. Click on Import...

  6. Locate your p12 Firefox will place them in the Downloads folder, select this folder

  7. Select the training_SuperAdmin.p12 file to import into Firefox, click Select

  8. Type the training_SuperAdmin password foo123, click Sign in

  9. Click OK, to close the certificate manager window

  10. Close the about:preferences tab

Screen Shot 2023-10-23 at 1.32.03 PM.png
Or use the Burger menu to import certificates