The Control Compliance Suite Management Service is the root certificate authority service that generates, manages, and signs certificates for the Control Compliance Suite components.

The Management Service is hosted by the Directory Server. The Management Service is installed and configured automatically when you install the Directory Server. The root certificate that the Management Service uses is created during installation. In addition, half of the key that is used for double encryption is created. The only user interface to the Management Service is the Certificate Management console.

The account you use for the Management Service must be a local administrator-equivalent account on the computer that hosts the service. The account can be an Active Directory domain account or a local Windows user account.