Next, the profile lists all of the required inputs for the profile:
input.list=i1,i2,i3
input.i1.class_id=keyGenInputImpl
input.i2.class_id=subjectNameInputImpl
input.i3.class_id=submitterInfoInputImpl
For the caUserCert profile, this defines the keys to generate, the fields to use in the subject name,
and the fields to use for the person submitting the certificate.
• Key generation specifies that the key pair generation during the request submission be CRMF-
based. A drop-down menu sets the key-size for the keys.
• Subject name is used when distinguished name (DN) parameters need to be collected from the
user; the user DN can be used to create the subject name in the certificate.
• UID (for the user in the LDAP directory)
• Email
• Common name
• Organizational unit
• Organization
• Country
• Requester. This input has three form fields:
• Requester name
• Requester email
• Requester phone
The inputs are listed in the certificate enrollment page for end entities, not the profile configuration
page for agents:
Example caUserCert Profile
19
Need help?
Do you have a question about the CERTIFICATE SYSTEM 8 - AGENTS GUIDE and is the answer not in the manual?