Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 228

Chapter 8. Token Processing System
Parameter
op.enroll.tokenType.keyGen.encryption.recovery.destroyed.scheme
op.enroll.tokenType.keyGen.encryption.recovery.destroyed.revokeCert
op.enroll.tokenType.keyGen.encryption.recovery.destroyed.revokeCert.reason
op.enroll.tokenType.keyGen.encryption.recovery.destroyed.revokeCert.reason
op.enroll.tokenType.keyGen.recovery.keyCompromise.keyType.num
op.enroll.tokenType.keyGen.recovery.keyCompromise.keyType.value.n
op.enroll.tokenType.keyGen.signing.recovery.keyCompromise.scheme
op.enroll.tokenType.keyGen.signing.recovery.keyCompromise.revokeCert
op.enroll.tokenType.keyGen.signing.recovery.keyCompromise.revokeCert.reason
206
Description
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
Specifies the encryption certificate recovery
scheme for destroyed tokens. The default value
is RecoverLast. The other possible value is
GenerateNewKey.
Specifies if the encryption certificate should be
revoked. The valid values are true|false. The
default value is true.
Specifies what the encryption certificate
revocation reason should be. The default value is
0. The valid values are as follows:
• 0 - Unspecified.
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
The number of key types for recovery for the
tokens whose keys are compromised.
Specifies keyType. The default values are
signing|encryption.
Specifies the signing certificate recovery scheme
for tokens whose keys are compromised. The
default value is GenerateNewKey. The other
possible value is RecoverLast.
Specifies if the signing certificate should be
revoked if the original token's key has been
comprised. The valid values are true|false.
Specifies what the signing certificate revocation
reason should be. The default value is 0. The
valid values are as follows:
• 0 - Unspecified.
• 1 - Key compromised.