To enable the dual control, Follow these steps: 

  1. Launch ADSS Server admin console in a web browser. 
  2. Navigate to Access Control > Roles module

  3. Create a new role in Access Control module with module Approval Manager enabled in it. You can also use the Security Officer role which is created as part of the ADSS Server installation if you do not wish to create a new role. Following screenshot details about creating the new role for dual control:

     
  4. Create a new operator using this role. Click here for more details about creating a new operator.
  5. Edit the role against the operator for which you want to enable the approval manager. e.g. Go>Sign Service as show in the following screenshot:

     
  6. Logout from the ADSS Server Console so that changes can take into effect.
  7. Re-login to the ADSS Server Console.
  8. Make any change in the modules for which dual control in enabled. When you will Add/Update or Delete anything then following message will be shown:

     
  9. Log-in to the ADSS Server Console using the security officer certificate
  10. Click the Approval Manager module

  11. You will see the requests that are waiting for approval and you can accept or reject accordingly. 

  12. Once you approved or reject the pending approval then following message will be shown:

Before enabling dual control ensure that at least one operator exists with access to the Approval Manager module and also the issuer of this operator's TLS client certificate is registered in Trust Manager. When Dual Control is already enabled then the Security Officer must approve the creation of new operators before these newly generated operators can login.



See also

Using Approval Manager