[FAB-13213] Add CA note to operations

It's important to make it explicit
that the TLS CA for the operations
service should be separate and
dedicated to it.

Change-Id: Ic738a71c70a4e4b0913c9899d357ea925562b6fb
Signed-off-by: joe-alewine <Joe.Alewine@ibm.com>

docs/source/operations_service.rst

@@ -16,8 +16,11 @@ Configuring the Operations Service
 
 The operations service requires two basic pieces of configuration:
 
-- The **address** and **port** to listen on
-- The **TLS certificates** and **keys** to use for authentication and encryption
+- The **address** and **port** to listen on.
+- The **TLS certificates** and **keys** to use for authentication and encryption.
+ Note, **these certificates should be generated by a separate and dedicated CA**.
+ Do not use a CA that has generated certificates for any organizations
+ in any channels.
 
 Peer
 ~~~~
@@ -294,4 +297,4 @@ For a look at the different metrics that are generated, check out
 :doc:`metrics_reference`.
 
 .. Licensed under Creative Commons Attribution 4.0 International License
- https://creativecommons.org/licenses/by/4.0/
+ https://creativecommons.org/licenses/by/4.0/