Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 233

Parameter
• op.enroll.tokenType.keyGen.encryption.private.keyCapabilities.token
op.enroll.tokenType.keyGen.encryption.label
op.enroll.tokenType.keyGen.encryption.cuid_label The CUID to show in the certificate.
op.enroll.tokenType.keyGen.encryption.overwrite Specifies if the encryption certificate on the token
op.enroll.tokenType.keyGen.encryption.ca.profileId The CA profile to use for enrolling
op.enroll.tokenType.keyGen.encryption.ca.conn
op.enroll.tokenType.update.applet.emptyToken.enable
op.enroll.tokenType.update.applet.enable
op.enroll.tokenType.update.applet.requiredVersion The version of the applet to use. It should be
op.enroll.tokenType.update.applet.directory
op.enroll.tokenType.update.symmetricKeys.enable Specifies if the key changeover feature should
op.enroll.tokenType.update.symmetricKeys.requiredVersion
op.enroll.tokenType.loginRequest.enable
op.enroll.tokenType.pinReset.enable
op.enroll.tokenType.pinReset.pin.minLen
op.enroll.tokenType.pinReset.pin.maxRetries
op.enroll.tokenType.pinReset.pin.maxLen
TPS Configuration Parameters
Description
The token label for the encryption certificate.
The valid values are $pretty_cuid$, $cuid$,
$msn$, $userid$, and $profileId$. These
variables are replaced by the user-supplied
information when the certificate is generated.
should be overwritten. The valid values are
true|false.
encryption certificates. The default value is
caTokenUserEncryptionKeyEnrollment.
The CA connection to use to generate encryption
certs. The default value is ca1.
Specifies whether TPS should upload an applet
to the token when it does not have one. The valid
values are true|false.
Specifies if applet upgrade is turned on. The
valid values are true|false.
the filename of the applet without the .ijc
extension.
The local filesystem directory where the applets
are located.
be enabled. The valid values are true|
false. When enabled, TPS checks to see
the key version sent by the token matches
symmetricKeys.requiredVersion.
The required key version.
Specifies if the login request should be
sent to the token. This parameter enables
authentication. The valid values are true|
false.
Specifies if the token's PIN should be reset.
The default value is true. The valid values are
true|false.
The minimum number of characters for the PIN.
The maximum number of times PIN
authentication can be attempted on the token
before the key is locked. This value is set on the
token when the PIN is reset.
The maximum number of characters for the PIN.
211