Netscape MANAGEMENT SYSTEM 6.01 - CUSTOMIZATION Manual page 123

Parameters Accepted by the Bulk Enrollment Interface (Continued)
Table 6-7
Parameter
digital_signature
encipher_only
key_agreement
key_certsign
key_encipherment
non_repudiation
Automated Enrollment
authenticator
uid
pin
Format and Description
true | false
Sets the keyUsage extension bit (0) indicating that the key may be used to
sign any data. This should be true for SSL client certificates, S/MIME
signing certificates, and object signing certificates.
true | false
Sets the keyUsage extension bit (7) indicating that the key may only be used
to encipher data and keys. If this is true, keyAgreement should also be true.
true | false
Sets the keyUsage extension bit (4) indicating that the key may be used to
encipher and decipher keys during key agreement.
true | false
Sets the keyUsage extension bit (5) indicating that the key may be used to
sign other certificates. All CA signing certificates should set this to true.
true | false
Sets the keyUsage extension bit (2) indicating that the key may be used to
encipher symmetric session keys. This should be true for SSL server and
S/MIME encryption certificates.
true | false
Sets the keyUsage extension bit (1) indicating that the key may be used to
create non-repudiated (by the signer) digital signatures. Non-repudiation
service requires more infrastructure, planning, and policy than just setting
this bit. Consider the ramifications before using this bit
Parameters to configure automatic authentication for entity requests.
string
Specifies the name of the authentication plug-in instance to use to
authenticate the entity.
string
Specifies a unique identifier passed to the authentication plug-in.
string
An optional identifying string that helps to authenticate an entity. Usually
used when the Pin Generator tool has been used to populate a directory with
unique identifiers for each user.
Bulk Enrollment Interface
Chapter 6 Agent Interface Reference 123