{
	/*Maps the Active Directory template to the CA certificate type. 
	When enrollment is requested for an Active Directory certificate template, 
	the corresponding CA type will be enrolled.
	Templates are specified by CommonName*/
	"Templates":{
    		"GoDaddyDVSSL": {
     			"ProductID": "DV_SSL"
    		},
    		"GoDaddyDVWildcardSSL": {
      			"ProductID": "DV_WILDCARD_SSL"
		    },
    		"GoDaddyUCCDVSSL": {
      			"ProductID": "UCC_DV_SSL"
    		}	
	},
	/*Grant permissions on the CA to users or groups in the local domain.
	READ: Enumerate and read contents of certificates.
	ENROLL: Request certificates from the CA.
	OFFICER: Perform certificate functions such as issuance and revocation. This is equivalent to "Issue and Manage" permission on the Microsoft CA.
	ADMINISTRATOR: Configure/reconfigure the gateway.
	Valid permission settings are "Allow", "None", and "Deny".*/
	"Security":{
		/* Replace "Keyfactor\\Administrator with the domain\\account that has administrative privileges */
		"Keyfactor\\Administrator":{
			"READ":"Allow",
			"ENROLL":"Allow",
			"OFFICER":"Allow",
			"ADMINISTRATOR":"Allow"
		},
		/* Replace "Keyfactor\\SVC_TimerService with the domain\\account service account that will perform enrollment, sync, and revocation */
		by the Command Service. */
		"Keyfactor\\SVC_TimerService":{
			"READ":"Allow",
			"ENROLL":"Allow",
			"OFFICER":"Allow",
			"ADMINISTRATOR":"None"
		},
		/*Replace Keyfactor\\SVC_AppPool with the Application Pool Account for Keyfactor Command needs read at minimum.  There are some function in Command that are not delegated to the logged in user (may be a result of local lab configuration TBD) so this allows the command portal to enumerate templates available in the AnyGateway CA
		*/
		"Keyfactor\\SVC_AppPool":{
			"READ":"Allow", //List the templates supported by the CA
			"ENROLL":"Allow",
			"OFFICER":"Allow",//Required to allow the portal to revoke a certificate. TODO: Ensure this is the case or if it should be delegated
			"ADMINISTRATOR":"None"
		}		
	},
	/*The Certificate Managers section is optional.
	If configured, all users or groups granted OFFICER permissions under the Security section
	must be configured for at least one Template and one Requester. 
	Uses "<All>" to specify all templates. Uses "Everyone" to specify all requesters.
	Valid permission values are "Allow" and "Deny".*/
	"CertificateManagers":null,
	/*"CertificateManagers":{
		"DOMAIN\\Username":{
			"Templates":{
				"MyTemplateShortName":{
					"Requesters":{
						"Everyone":"Allow",
						"DOMAIN\\Groupname":"Deny"
					}
				},
				"<All>":{
					"Requesters":{
						"Everyone":"Allow"
					}
				}
			}
		}
	},*/
	/*Information necessary to authenticate to the CA.*/
	"CAConnection":{
		// Base URL for GoDaddy API calls.  This value should probably not need to change 
		//  from what is shown below
    		"APIUrl": "https://api.ote-godaddy.com",
		// The ShopperId is the "Customer #" found by selecting the pulldown on the top 
		//   right of the GoDaddy portal home page after signing in using the account 
		//   being used for the Gateway
    		"ShopperId": "9999999999",
		// The APIKey is the GoDaddy API Key and secret mentioned in "Prerequisites"
    		"APIKey": "sso-key {large string value API Key}:{large string value API Secret}",
		// One of four values based on the CA chain enrolled certificates should be 
		//  validated against - GODADDY_SHA_1, GODADDY_SHA_2, STARTFIELD_SHA1, or STARTFIELD_SHA2
    		"RootType": "GODADDY_SHA_2",


		// The SyncPageSize represents the number of certificates that will be returned 
		//  for each GoDaddy "get certificates" API call during a "sync" operation.  
		//  The API call will be repeated in batches of this number until all cerificates 
		//  are retrieved from the GoDady CA.  GoDaddy has no imposed limit on the number 
		//  of certificates that can be returned, but due to the amount of data being returned 
		//  for each call, certificate data may need to be returned in batches.
    		"SyncPageSize": "50", //Default=50, Minimum=10, Maximum=1000


		// The following 7 settings are all optional.  They each have a: 1) default value,  
		//  2) minimum allowed value, and 3) maximum allowed value.  If any value is missing 
		//  or outside the min/max allowed range, the default value will be used


		// EnrollmentRetries is the number of tries an Enroll operation will attempt to successfully 
		//  enroll a certificate (defined as a certificate being ISSUED or PENDING_ISSUANCE) 
		//  against the GoDaddy CA before returning an error.
    		"EnrollmentRetries": "2", //Default=2, Minimum=0, Maximum=5


		// SecondsBetweenEnrollmentRetries is the amount of time an Enroll operation will wait 
		//  between enrollment requests against the GoDaddy CA if the previous attempt did not 
		//  produce a certificate with a status of ISSUED or PENDING_ISSUANCE.
    		"SecondsBetweenEnrollmentRetries": "5", //Default=5, Minimum=2, Maximum=20


		// ApiTimeoutInSeconds is the amount of time in seconds that a GoDaddy API request 
		//  will wait before the call times out, producing a timeout error.
    		"ApiTimeoutInSeconds": "20", //Default=20, Minimum=2, Maximum=100


		// NumberOfCertPageRetrievalRetriesBeforeFailure is the number of times during a sync 
		//  the retrieval of an individual page of certificates will be retried after a 
		//  timeout before the sync will fail
    		"NumberOfCertPageRetrievalRetriesBeforeFailure": "2", //Default=2, Minimum=0, Maximum=10


		// NumberOfCertDownloadRetriesBeforeSkip is the number of times during a sync the retrieval 
		//  of any individual certificate will be retried before that individual certificate is 
		//  skipped if the GoDaddy API download request times out.
    		"NumberOfCertDownloadRetriesBeforeSkip": "2", //Default=2, Minimum=0, Maximum=10


		// NumberOfTimeoutsBeforeSyncFailure is the total number of timeouts all GoDaddy
		//  API requests can return during a sync before the sync will fail with an error
    		"NumberOfTimeoutsBeforeSyncFailure": "2", //Default=100, Minimum=0, Maximum=5000


		// MillisecondsBetweenCertDownloads is the amount of time, in milliseconds a sync 
		//  operation will wait between GoDaddy API download requests.  This is necessary 
		//  because GoDaddy places a 60 API request per minute limit on most accounts.  
		//  After that 60 limit has been reached, GoDaddy will begin returning 
		//  TOO_MANY_REQUEST errors.  A value of "1000" (1 second between requests) is 
		//  recommended, but this is configurable in case an individual account allows a 
		//  higher number of requests.
    		"MillisecondsBetweenCertDownloads": "1000" //Default=1000, Minimum=0, Maximum=1000

	},
	/*Information to register the Gateway for client connections.*/
	"GatewayRegistration":{
		// LogicalName is the Logical Name of the CA set up in Keyfactor - PKI Management => Certificate Authorities (later step)
		"LogicalName": "GoDaddyCA",
		// GatewayCertificate is the location and thumbprint of the GoDaddy intermediate CA certificate installed in a previous step
		"GatewayCertificate": {
      			"StoreName": "CA",
      			"StoreLocation": "LocalMachine",
      			"Thumbprint": "‎27ac9369faf25207bb2627cefaccbe4ef9c319b8"
		}
	},
	/*Settings for the Gateway Service*/
	"ServiceSettings":{
		// ViewIdleMinutes - Number of minutes a Sync operation can take before a timeout is reported
		"ViewIdleMinutes":8,
		// How often, in hours, a full scan will occur
		"FullScanPeriodHours": 1,
		// How often, in minutes, a partial scan will occur.  NOTE: for the GoDady AnyGateway, a partial scan is the same as a full scan
		"PartialScanPeriodMinutes":15
	}
}