Certificaterenewalwindowext - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Extension-Specific Policy Module Reference
Table 12-18 CertificatePoliciesExt Configuration Parameters (Continued)
Parameter
displayText

CertificateRenewalWindowExt

The
CertificateRenewalWindowExt
Renewal Window Extension to certificates. The extension aids in managing the life cycle of
a certificate by specifying a process to follow for renewing a certificate and by defining a
time window when automatic renewal of the certificate should be attempted.
Because the renewal process requires end users to remember when their certificates expire
and renew them before the expiry date, some clients provide built-in support for automated
renewal. Inclusion of the certificate renewal window extension in certificates is useful in a
PKI setup with such clients.
Unlike some of the other policy modules, CS does not create an instance of the certificate
renewal window extension policy during installation. If you want the server to add this
extension to certificates, you must create an instance of the
CertificateRenewalWindowExt
Table 12-19 CertificateRenewalWindowExt Configuration Parameters
Parameter
enable
496 Red Hat Certificate System Administrator's Guide • September 2005
Description
Specifies the textual statement to be included in certificates; this parameter corresponds to
the explicitText field of the user notice. If you want to embed a textual statement (for
example, your company's legal notice) in certificates, then add that statement here. The text
you enter here will be displayed to a relying party when the certificate is used or viewed.
Note that certain applications may not have the capability to display this text. Also,
embedding a policy statement in a certificate increases its size.
If you specify values for both policyId and displayText parameters and if the
application software cannot locate the notice text indicated by the policyId parameter,
then it is supposed to display the embedded notice; otherwise, it's supposed to display the
information specified by the policyId parameter. (This feature is application specific
CS
and has no control over it.)
Permissible values: A string with up to 200 characters.
Example: Example Corporation's CPS incorp. by reference liab.
ltd. (c) 2002 Example Corporation
Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable.
plug-in module enables you to add the Certificate
module and configure it.