Parameters
policy-name: Specifies the name of a certificate access control policy, a case-insensitive string of 1 to 31
characters.
Usage guidelines
If no policy name is specified, this command displays information about all certificate access control
policies.
Examples
# Display information about the certificate access control policy mypolicy.
<Sysname> display pki certificate access-control-policy mypolicy
Access control policy name: mypolicy
Rule 1
Rule 2
# Display information about all certificate access control policies.
<Sysname> display pki certificate access-control-policy
Total PKI certificate access control policies: 2
Access control policy name: mypolicy1
Rule 1
Rule 2
Access control policy name: mypolicy2
Rule 1
Rule 2
Table 23 Command output
Field
Total PKI certificate access control
policies
permit
deny
Related commands
•
pki certificate access-control-policy
rule
•
display pki certificate attribute-group
Use display pki certificate attribute-group to display information about certificate attribute groups.
Syntax
display pki certificate attribute-group [ group-name ]
deny
mygroup1
permit
mygroup2
deny
mygroup1
permit
mygroup2
deny
mygroup3
permit
mygroup4
Description
Total number of certificate access control policies.
If the attributes of a certificate match the attributed rules defined in the
attribute group that the policy references, the certificate passes the
check and is regarded valid.
If the attributes of a certificate match the attributed rules defined in the
attribute group that the policy references, the certificate fails the check
and is regarded invalid.
182