Netscape MANAGEMENT SYSTEM 6.0 - CUSTOMIZATION Manual page 110

Bulk Enrollment Interface
Parameters Accepted by the Bulk Enrollment Interface (Continued)
Table 6-5
Parameter
key_encipherment
non_repudiation
Automated Enrollment
authenticator
uid
pin
pwd
Other
certNickname
certType
110 Netscape Certificate Management System Customization Guide • March 2002
Format and Description
true | false
Sets the keyUsage extension bit (2) indicating that the key may be used to
encipher symmetric session keys. This should be true for SSL server and
S/MIME encryption certificates.
true | false
Sets the keyUsage extension bit (1) indicating that the key may be used to create
non-repudiable (by the signer) digital signatures. Non-repudiation service
requires more infrastructure, planning, and policy than just setting this bit.
Consider the ramifications before using this bit
Parameters to configure automatic authentication for entity requests.
string
Specifies the name of the authentication plug-in instance to use to authenticate
the entity.
string
Specifies a unique identifier passed to the authentication plug-in.
string
An optional identifying string that helps to authenticate an entity. Usually used
when the Pin Generator tool has been used to populate a directory with unique
identifiers for each user.
string
Specifies the password passed to the authentication plug-in.
string
Specifies the nickname that should be associated with the certificate in the
reply; used with Certificate Request Management Format (CRMF) requests.
ca | CEP-Request | client | objSignClient | ra | server | other
Specifies the type of certificate requested by the entity. The default is client.
The certType is not associated with any certificate extensions. It may be used
by policy modules to make decisions, and it may be used by a CMS server to
determine how to decode the request or format the response.