CA Gateway requires an administrator profile issued by the Entrust Certificate Authority. This profile must have a role with the following permissions.

To create a new role for the administrator profile

1. Log in to Entrust Certificate Authority administration portal.
2. In the tree view, expand Security Policy > Roles.
3. Select Policies > Roles > New to create a new role. Alternatively, you can copy the Administrator role because this role includes most of the permissions required for the new role. 
   1. Select Administrator. 
   2. Select Policies > Roles > Selected Role > Copy . A copy of the role appears at the bottom of the list of roles in the tree view, and the new role’s properties appear in the right pane.

4. Click the Role tab.

   1. Into the Unique name field, enter CAGW Admin Role.

   2. In the Authorizations field, enter 1.

   3. In the User Policy drop-down list, select CAGW Admin Policy. This is the client policy you created earlier.

   4. Unselect the End User check box. This check box should already be deselected.

5. Click the Permissions tab.

6. Configure the permissions documented in the above table and click Apply. 

7. If prompted, authorize the operation. As explained in the Entrust Certificate Authority documentation, the operation may require more than one authorization. 

8. A Permission Dependencies pop-up dialog may list additional permissions required for the role to function properly. Add these missing permissions to the role.