## Server props - default DN parts: country, state, city, org, OU - "customizable" flags for DN parts - flag: use client-to-client - force cipher, tls-cipher, auth params - server name - default certification length - default certificate algo ## User props - username - password - custom DN parts: country, state, city, org, OU - email ## User caps - admin: administrator - login: can log into the web interface - issue: can certify own devices without approval - renew: can renew certificates for own devices ## Device props - name - type (icon) - expiry