Netscape MANAGEMENT SYSTEM 4.5 - PLUG-IN Manual page 217

Table 4-20 Description of parameters defined in the NSCertTypeExt module
Parameter Description
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
enable
Uncheck the box to disable the rule (default).
• If you enable the rule, be sure to review the enrollment forms for Netscape
• If you disable the rule, the server does not add the extension to certificates; it
Specifies the predicate expression for this rule. If you want this rule to be applied to
predicate
all certificate requests, leave the field blank (default). To form a predicate expression,
see section "Using Predicates in Policy Rules" in Chapter 18, "Setting Up Policies" of
CMS Installation and Setup Guide.
Example: HTTP_PARAMS.certType==client
Specifies whether to set the Netscape certificate type extension with default bits in
setDefaultBits
certificates specified by the predicate expression.
• Check the box the if you want the server to add the extension, with default bits, to
• Uncheck the box if you don't want the server to add the extension with default
certificate type extension-specific variables and to set the remaining parameters of
this policy correctly. If the bits are unspecified in the enrollment form, the server
checks the value assigned to the setDefaultBits parameter. If it is unchecked
(false), the server does not set the extension.
ignores the Netscape certificate type extension-specific HTTP input values in the
certificate request and the status of the setDefaultBits parameter.
certificates. If you check the box and if no bits are requested from the HTTP input,
the server adds the Netscape certificate type extension to certificates with the
following bits set:
- ssl client (bit 0)
- email (bit 2)
bits. If you uncheck the box and if no bits are requested from the HTTP input, the
server does not add the extension to certificates.
NSCertTypeExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 217