Table of Contents
Advertisement
Description of parameters defined in the RenewalValidityConstraints module (Continued)
Table 3-7
Parameter
minValidity
maxValidity
renewalInterval
DefaultRenewalValidityRule Rule
The rule named
RenewalValidityConstraints
automatically creates this rule during installation. By default, the rule is configured
as follows:
•
The rule is enabled.
•
The predicate expression is left blank so that the policy is applied to all
certificate renewal requests processed by the server.
•
The minimum validity period permitted for renewed certificates is 30 days
(
•
The maximum validity period permitted for renewed certificates is 365 days
(
•
The number of days before expiration that end entities can renew their
currently valid certificates is 15 (
For details on individual parameters defined in the rule, see Table 3-7 on page 106.
You need to review this rule and make the changes appropriate for your PKI setup.
For instructions, see section "Step 2. Modify Existing Policy Rules" in Chapter 18,
"Setting Up Policies" of CMS Installation and Setup Guide. For instructions on
adding additional instances, see section "Step 4. Add New Policy Rules" in the
same chapter.
Description
Specifies the minimum validity period, in days, for renewed certificates.
Permissible values: As applicable. The default value is 180 days.
Example: 60
Specifies the maximum validity period, in days, for renewed certificates.
Permissible values: As applicable. The default value is 730 days.
Example: 180
Specifies how many days before its expiration that a certificate can be renewed.
Permissible values: As applicable. The default value is 15 days.
Example: 15
DefaultRenewalValidityRule
).
minValidity=30
).
maxValidity=365
RenewalValidityConstraints Plug-in Module
is an instance of the
module. Certificate Management System
renewalInterval=15
Chapter 3
).
Constraints Policy Plug-in Modules
107
Advertisement
Table of Contents
