Configure a Backup Administrator

Before deploying subsequent Action1 agents, configure a backup Enterprise Admin account and create and approve the Action1 Key for that account. If you lose access to your Action1 Key, this backup administrator will be able to approve your replacement Action1 Key or to sign configurations.

In an ETP-enabled Action1 deployment, every user assigned the Enterprise Admin role receives the following permissions for Action1 Key management and signing configurations:

• Manage Signatures – allows you to create signatures for configurations in the specified scope.
• Manage Keychain Store – allows you to save keychain records in the specified scope. Implicitly includes the Manage Signatures permission.

The setup process includes the steps to be taken by the current and the new backup administrators:

1. Current administrator: Add the backup administrator and assign the Enterprise Admin role. See Users and Roles.
2. Backup administrator: Sign in using your own account and create your Action1 Key. Copy and securely store the generated Key passphrase. If you use Local Storage, also save your Action1 Key file separately from the Key passphrase. See How to create an Action1 Key.
3. Backup administrator: Copy the Confirmation code and send it securely to the current administrator, who must have an Active Action1 Key.
4. Current administrator: On Users & API Credentials, select the backup administrator’s account and start the key approval procedure. Verify the request, enter the Confirmation code, and sign the approval using your own Action1 Key. See How to approve an Action1 Key for details.
5. Both administrators: On your own My Account page, verify that your Action1 Key status is Active. Both administrators must have an Active Action1 Key before continuing to the test deployment.