Concepts

CA Service Concepts

• Trust model

  Describes how the CA Service handles authorization.

• CA states

  Describes the properties of each state a CA can be in through its lifecycle.

• Locations

  Provides the list of geographical locations where you can create your CA Service resources.

• Workload-optimized tiers

  Describes and compares the supported tiers at which certificate authorities can be created.

• Managed resources

  Describes the different models of resource management supported by CA Service.

• Certificate authority settings

  Describes the permanent and optional settings of a CA.

• Certificate templates

  Describes the concept of certificate templates.

• CA pools

  Describes the concept of CA pools.

• Policy controls

  Describes the use cases of the various policy controls.

• Identity reflection

  Describes a restricted certificate issuance mode for unprivileged certificate requesters. With the identity reflection mode, an unprivileged certificate requester can only request certificates with an SAN corresponding to the identity in their credential.