Management of the PKI system is slightly different from managing other components. Locking of the PKI component is site-based, that is, when an administrator starts to modify the PKI settings of a host (either on one of the Edit Certificates panels or the Site preferences), the whole site is locked from other administrators. Changes are committed automatically.