Trust anchor certificate statuses
When you import a root or ICA certificate, the status appears as Pending approval
. Afterward, a system user with the Administrator role or Manage certificate hierarchy permission can unlock, approve, or reject the certificate.