Understand what Private CA controls
DigiCert® Private CA issues and manages private trust certificates for your organization. It controls:
Certificate authority creation, activation, and revocation
CA key generation and signing operations through hardware security modules
Certificate profiles, policies, and issuance rules
Certificate issuance, renewal, and revocation
Certificate revocation status distribution through OCSP and CRL
Product audit logs for CA and certificate activity
Private CA does not manage user accounts, sign-in methods, or credentials. Those are managed in Account Manager. A Private CA role does not grant Account Manager administrative permissions, and an Account Manager role does not grant access to Private CA.