Hello All

Can someone please help me with the following question, I have been searching the internet for the information but no luck thus far.

Normally a member of the Domain Admins group would created CSR and install Certificates. However we want to pass this responsibility to our Technical Operations Team (who are not Domain Admins). If possible we do not want to give them Local Administrator rights on the Windows Servers where they will be creating CSR and Installing certificates. Is there a document somewhere showing the rights required to do the above?

Thanks all

Ernie