Control ID: CA-PERM-001
Control Name: CA Administrator Permission Validation
Severity: Critical
Status: Failure
Certificate Authority: securetron-lab-ISSUINGCA
Execution Time: 2025-10-15 22:43:13
Duration: 00:00:00.0119997

Expected Result:
Principals with 'CA Administrator Certificate Manager' or 'CA Administrator' permissions must exist in the expected principals list

Evidence:
CA Administrator Permission Validation for securetron-lab-ISSUINGCA:
  Total Admin Principals Found: 6
  Expected Principals (from parameters.json): 
  Non-Compliant Principals: 6

Admin Principals Analysis:
  ✗ BUILTIN\Administrators (NON-COMPLIANT)
  ✗ BUILTIN\Administrators (NON-COMPLIANT)
  ✗ SECURETRON-LAB\Domain Admins (NON-COMPLIANT)
  ✗ SECURETRON-LAB\Domain Admins (NON-COMPLIANT)
  ✗ SECURETRON-LAB\Enterprise Admins (NON-COMPLIANT)
  ✗ SECURETRON-LAB\Enterprise Admins (NON-COMPLIANT)

Validation Results:
  Compliant Principals: 0
  Non-Compliant Principals: 6
  Overall: NON-COMPLIANT


Recommendation:
Add the following principals to the CA-PERM-001 array in parameters.json: BUILTIN\Administrators, BUILTIN\Administrators, SECURETRON-LAB\Domain Admins, SECURETRON-LAB\Domain Admins, SECURETRON-LAB\Enterprise Admins, SECURETRON-LAB\Enterprise Admins
