About divisions in a CA account¶

When using DigiCert as your certificate authority, you can assign a division to a CA account, as defined in your DigiCert account.

This feature allows you to manage billing separately for different units within your organization while using a single DigiCert API key. It also supports least-privilege access by enabling you to assign specific issuing templates that link CA account divisions to designated users or groups.

Using the divisions feature?¶

When you create a CA account using DigiCert, you must click Validate before the Division option appears.

Once you create separate CA accounts for the required divisions, you can use these accounts in issuing templates to control user access. For more information, see Creating issuing templates.

When a user creates a CSR with an issuing template linked to a CA account that specifies a division, the certificate and its assigned division will be visible in your DigiCert account. This helps ensure accurate internal billing.

Editing division assignments¶

Editing the division assigned to a CA account¶

You can't change the division assigned to a CA account after creation. To use a different division, you must create a new CA account and assign the correct division during setup.

Assigning a division to an existing CA account¶

If a CA account was created without a division, you can't assign one later. Instead, you must create a new CA Account and select the appropriate division.

Impact of division assignments on certificates¶

The division assignment does not appear in the CSR or the issued certificate. It is only visible in TLS Protect Cloud and your DigiCert account portal.