setup CA role