Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 231

Parameter
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.sign
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.signRecover
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.decrypt
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.derive
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.unwrap
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.wrap
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.verifyRecover
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.verify
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.sensitive
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.private
• op.enroll.tokenType.keyGen.signing.public.keyCapabilities.token
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.encrypt
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.sign
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.signRecover
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.decrypt
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.derive
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.unwrap
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.wrap
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.verifyRecover
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.verify
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.sensitive
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.private
• op.enroll.tokenType.keyGen.signing.private.keyCapabilities.token
op.enroll.tokenType.keyGen.signing.label
op.enroll.tokenType.keyGen.signing.cuid_label
op.enroll.tokenType.keyGen.signing.overwrite
TPS Configuration Parameters
Description
The token label for the signing certificate. The
valid values are $pretty_cuid$, $cuid$,
$msn$, $userid$, and $profileId$. These
variables are replaced by the user-supplied
information when the certificate is generated.
The CUID to show in the certificate.
Specifies if the TPS should overwrite the existing
signing certificate. The valid values are true|
false.
209