1 Answers

0
yacovm On

There are two planes of authentication in each Fabric peer/orderer:

  • Channel authentication, that is derived from the "channel MSP" which is constructed from the channel configuration (i.e from the genesis block) - Identities that are specified in the channel configuration as admins can perform administrative operations on channels, such as creating new channels, or modifying channels, etc.

    • Local authentication, that is derived from the "local MSP" - Identities that are specified in the local configuration (sampleconfig/msp/admincerts) can perform administrative operations that have no channel context, such as installing chaincodes, and joining peers to channels.