Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual page 153

Parameter
op.enroll.tokenType.keyGen.encryption.recovery.keyCompromise.scheme
op.enroll.tokenType.keyGen.encryption.recovery.keyCompromise.revokeCert
op.enroll.tokenType.keyGen.encryption.recovery.keyCompromise.revokeCert.reason
op.enroll.tokenType.keyGen.recovery.onHold.keyType.num
op.enroll.tokenType.keyGen.recovery.onHold.keyType.value.#
op.enroll.tokenType.keyGen.signing.recovery.onHold.scheme
op.enroll.tokenType.keyGen.signing.recovery.onHold.revokeCert
op.enroll.tokenType.keyGen.signing.recovery.onHold.revokeCert.reason
op.enroll.tokenType.keyGen.encryption.recovery.onHold.scheme
op.enroll.tokenType.keyGen.encryption.recovery.onHold.revokeCert
op.enroll.tokenType.keyGen.encryption.recovery.onHold.revokeCert.reason
Configuring TPS Enrollment Operations
Description
Specifies encryption certificate recovery scheme for tokens whose
RecoverLast.
Specifies if the encryption certificate should be revoked if the toke
Specifies what the signing certificate revocation reason should be
• 0 - Unspecified.
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
The number of key types for the tokens to put on hold for tempora
Specifies keyType. The default values are signing|encrypti
The recovery scheme for signing certificates for tokens that are to
Specifies if the signing certificate should be revoked if the token's
Specifies what the signing certificate revocation reason should be
• 0 - Unspecified.
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
The recovery scheme for encryption certificates for tokens that ar
Specifies if the encryption certificate should be revoked if the toke
Specifies what the signing certificate revocation reason should be
• 0 - Unspecified.
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
131