ADSS Web RA allows additional monitoring for the certificate requests by enabling dual control from: Configurations --> General Settings screen. Once the dual control is enabled, any certificate request coming from a Enterprise RAO, will be reviewed first by the Admin RAO before reaching its final status.

Admin RAO will have the control to approve or decline a certificate request.

How it Works?

1. Admin RAO checks the Dual Control option from: Configurations > General Settings screen
2. For example, Admin RAO wants to enable dual control for the ABC Enterprise.The Role created for the ABC Enterprise is ABC-Role on the Access Control > Roles screen. Admin RAO edits the ABC-Role, checks the Dual Control option (proceed with the default configuration) and presses the Save button
3. After completing the above configurations, certificate requests coming from the Enterprise RAO (of the ABC Enterprise) will be first reviewed by the Admin RAO. Admin RAO can approve or decline these requests.