Control ID: CA-PERM-001
Control Name: CA Administrator Permission Validation
Severity: Critical
Status: Failure
Certificate Authority: Securetron-Lab-ROOT-CA
Execution Time: 2025-10-15 22:42:50
Duration: 00:00:00.0221920

Expected Result:
Principals with 'CA Administrator Certificate Manager' or 'CA Administrator' permissions must exist in the expected principals list

Evidence:
CA Administrator Permission Validation for Securetron-Lab-ROOT-CA:
  Total Admin Principals Found: 3
  Expected Principals (from parameters.json): 
  Non-Compliant Principals: 3

Admin Principals Analysis:
  ✗ SECURETRON-LAB\Domain Admins (NON-COMPLIANT)
  ✗ SECURETRON-LAB\Enterprise Admins (NON-COMPLIANT)
  ✗ BUILTIN\Administrators (NON-COMPLIANT)

Validation Results:
  Compliant Principals: 0
  Non-Compliant Principals: 3
  Overall: NON-COMPLIANT


Recommendation:
Add the following principals to the CA-PERM-001 array in parameters.json: SECURETRON-LAB\Domain Admins, SECURETRON-LAB\Enterprise Admins, BUILTIN\Administrators
