Step 3. Delete Unwanted Policy Rules; Step 4. Add New Policy Rules - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

Configuring Policy Rules for a Subsystem

Step 3. Delete Unwanted Policy Rules

You can delete any unwanted policy rules from the CMS configuration. If you
think you might need a rule in the future, instead of deleting it from the
configuration you should disable it by unchecking the
way, you can avoid re-creating the rule in the future. Because the subsystems
subject end-entity requests only to rules that are currently enabled (see "Policy
Processor" on page 588), keeping unwanted rules in the disabled state in the
configuration does not affect policy decisions made by a subsystem.
To delete a policy rule from the CMS configuration:
In the Policy Rules Management tab, select the rule you want to delete and
1.
click Delete.
When prompted, confirm the delete action.
2.
The CMS configuration is modified. If the changes you made require you to
restart the server, you will be prompted accordingly. Don't restart the server
yet; you can do so after you've made all the required changes.

Step 4. Add New Policy Rules

Adding a policy rule to the CMS configuration involves creating a new instance of
an already registered policy plug-in module, assigning a unique name for the
instance, and entering appropriate values for the parameters that define the
module you want to create an instance of.
When you add a policy rule, the CMS configuration gets updated with
policy-specific information. Keep the following points in mind:
• When naming a policy instance (or rule), be sure to formulate the name using
any combination of letters (aA to zZ), digits (0 to 9), an underscore (_), and a
hyphen (-); other characters and spaces are not allowed. For example, you can
type
Policy Rule
• The status of the rule, enabled or disabled, depends on whether you check or
uncheck the
to rules that are enabled.
• The server does not automatically reorder rules. Be sure to change the order of
the rule, if required.
594 Netscape Certificate Management System Installation and Setup Guide • October 2001
or
My_Policy_Rule MyPolicyRule
.
parameter. A subsystem subjects certificate requests only
enable
parameter. In this
enable
as the instance name, but not
My