Prepare your environment for Certificate Authority Service
This page shows you how to prepare your environment to set up Certificate Authority Service.
Enable the CA Service API
- Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.
-
In the Google Cloud console, on the project selector page, select or create a Google Cloud project.
-
Make sure that billing is enabled for your Google Cloud project.
-
Enable the Certificate Authority Service API.
-
In the Google Cloud console, on the project selector page, select or create a Google Cloud project.
-
Make sure that billing is enabled for your Google Cloud project.
-
Enable the Certificate Authority Service API.
Configure roles and permissions
To get the permissions that you need to set up CA Service,
ask your administrator to grant you the
CA Service Admin (roles/privateca.admin
) IAM role on the project.
For more information about granting roles, see Manage access to projects, folders, and organizations.
You might also be able to get the required permissions through custom roles or other predefined roles.
For information about granting roles to CA Service resources, see Access control with IAM.
What's next
- Access control with IAM.
- Get started with CA Service.