为证书授权机构服务做好环境准备

本页介绍了如何准备环境以设置证书颁发机构服务。

启用 CA Service API

1. Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.

2. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

   Go to project selector

3. Make sure that billing is enabled for your Google Cloud project.

4. Enable the Certificate Authority Service API.

   Enable the API

5. In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

   Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

   Go to project selector

6. Make sure that billing is enabled for your Google Cloud project.

7. Enable the Certificate Authority Service API.

   Enable the API

配置角色和权限

如需获得设置 CA 服务所需的权限，请让管理员向您授予项目的 CA Service Admin (roles/privateca.admin) IAM 角色。 如需详细了解如何授予角色，请参阅管理对项目、文件夹和组织的访问权限。

您也可以通过自定义角色或其他预定义角色来获取所需的权限。

如需了解如何向 CA Service 资源授予角色，请参阅使用 IAM 进行访问权限控制。

后续步骤

• 使用 IAM 进行访问权限控制。
• 开始使用 CA Service。