Refine Security Administration Structure › The MSCA › Physically Secure the MSCA’s Password and ACID

Physically Secure the MSCA’s Password and ACID

It is recommended that your security implementation strategy include plans to physically secure the MSCA’s ACID and password, keeping them confidential and possibly locking them in a safe place so that they can be retrieved in an emergency.

It is further recommended that the MSCA account NOT be used for routine CA Top Secret maintenance. It is used only when required. For example, only the MSCA can create SCAs so the MSCA account must be used for this purpose.