When an administrator starts to modify the PKI settings (either on one of the Edit Certificates panels or the Site Preferences), the PKI component is locked from other administrators. Changes are committed automatically.