Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 152

Chapter 5. Using and Configuring the Token Management System: TPS, TKS, and Enterprise Security Client
Parameter
op.enroll.tokenType.keyGen.encryption.recovery.destroyed.scheme
op.enroll.tokenType.keyGen.encryption.recovery.destroyed.revokeCert
op.enroll.tokenType.keyGen.encryption.recovery.destroyed.revokeCert.reason
op.enroll.tokenType.keyGen.encryption.recovery.destroyed.revokeCert.reason
op.enroll.tokenType.keyGen.recovery.keyCompromise.keyType.num
op.enroll.tokenType.keyGen.recovery.keyCompromise.keyType.value.#
op.enroll.tokenType.keyGen.signing.recovery.keyCompromise.scheme
op.enroll.tokenType.keyGen.signing.recovery.keyCompromise.revokeCert
op.enroll.tokenType.keyGen.signing.recovery.keyCompromise.revokeCert.reason
130
Description
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
Specifies the encryption certificate recovery scheme for destroyed tokens
GenerateNewKey.
Specifies if the encryption certificate should be revoked. The valid values
Specifies what the encryption certificate revocation reason should be. The
• 0 - Unspecified.
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
The number of key types for recovery for the tokens whose keys are com
Specifies keyType. The default values are signing|encryption.
Specifies the signing certificate recovery scheme for tokens whose keys a
possible value is RecoverLast.
Specifies if the signing certificate should be revoked if the original token's
Specifies what the signing certificate revocation reason should be. The de
• 0 - Unspecified.
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.