Managing Quorum
When you enable
Quorum for a configuration tier, sensitive changes now require approval. You can enable Quorum, change its approvers and required approvals, or disable it. You manage Quorum for each configuration tier separately.
Note: Enabling, changing, or disabling Quorum itself also requires approval.
Prerequisites
To complete these steps, you must have a Superuser role or a
custom role with write access to the
Built-in CAs permission set.
To Enable Quorum for a Tier
Sign in to Next-Gen Trust Security.
Select Configuration > Certificate Integrations > Certificate Authorities.
Click Settings.
On the Next-Gen CA Settings tab, select the tier, either Test or Production.
In Quorum, click Enable Test Quorum or Enable Production Quorum.
In Approvers, add at least two people to approve changes. NGTS adds you by default.
In Approvals required, enter how many approvals a change needs. The default is three.
Click Next: Summary.
Review the summary, and then click Propose.
The Quorum section shows that the change is waiting for approval. If you are one of the approvers, proposing the change counts as your approval.
To Edit a Tier's Quorum
Edit a quorum to change its approvers or the number of approvals a change needs.
Note: You can't edit a quorum change while it is waiting for approval. Instead,
reject it and propose a new one.
Sign in to Next-Gen Trust Security.
Select Configuration > Certificate Integrations > Certificate Authorities.
Click Settings.
On the Next-Gen CA Settings tab, select the tier, either Test or Production.
In Quorum, click Edit.
Change the Approvers, the Approvals required, or both.
Click Next: Summary.
Review the summary, and then click Propose.
The Quorum section shows the proposed quorum next to the current one until the change gets enough approvals.
To Disable Quorum
Disabling Quorum needs the same number of approvals as any change in a tier. When a request to disable Quorum gets enough approvals, NGTS turns it off and rejects all other pending changes.
Sign in to Next-Gen Trust Security.
Select Configuration > Certificate Integrations > Certificate Authorities.
Click Settings.
On the Next-Gen CA Settings tab, select the tier, either Test or Production.
In Quorum, click Disable Test Quorum or Disable Production Quorum.
Under Review Impact, confirm how many pending changes NGTS rejects when the request gets enough approvals, and the quorum that it removes.
Click Propose.
NGTS opens Pending Approvals with your request selected. Until the request is approved or rejected, you can't submit another disable request.
