Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual page 305

Parameter
desc
enable
auth.instance_id
name
input.list
input.input_id.class_id
output.list
output.output_id.class_id
policyset.list
policyset.rule_id.list
policyset.rule_id.policy_number.constraint.class_id
policyset.rule_id.policy_number.constraint.name
Modifying Certificate Profiles through the Command Line
Description
Gives a free text description of the certificate
profile, which is shown on the end-entities
page. For example, desc=This certificate profile
is for enrolling server certificates with agent
authentication.
Sets whether the profile is enabled, and therefore
accessible through the end-entities page. For
example, enable=true.
Sets which authentication manager plug-in
to use to authenticate the certificate request
submitted through the profile. For automatic
enrollment, the CA issues a certificate
immediately if the authentication is successful. If
authentication fails or there is no authentication
plug-in specified, the request is queued to be
manually approved by an agent. For example,
auth.instance_id=AgentCertAuth.
Gives the name of the profile. For example,
name=Agent-Authenticated Server Certificate
Enrollment.
Lists the allowed inputs for the profile by name.
For example, input.list=i1,i2.
Gives the java class name for the input by input
ID (the name of the input listed in input.list). For
example, input.i1.class_id=certReqInputImpl.
Lists the possible output formats for the profile by
name. For example, output.list=o1.
Gives the java class name for the output
format named in output.list. For example,
output.o1.class_id=certOutputImpl.
Lists the configured profile rules. For dual
certificates, one set of rules applies to the signing
key and the other to the encryption key. Single
certificates use only one set of profile rules. For
example, policyset.list=serverCertSet.
Lists the policy sets configured for the
profile by ID number. For example,
policyset.serverCertSet.list=1,2,3,4,5,6,7,8.
Gives the java class name of the
constraint plug-in set for the default
configured in the profile rule. For example,
policyset.serverCertSet.1.constraint.class_id=subjectNameCon
Gives the user-defined name
of the constraint. For example,
policyset.serverCertSet.1.constraint.name=Subject
Name Constraint.
283