Step 5. Reorder Policy Rules - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual

certificate cannot be used for 10 minutes. Setting the value of the
parameter to 10 minutes would adjust the value of the
notBeforeSkew
notBefore parameter to 11:20 a.m.—thus making the certificate usable
following the down load. The default value is 5 minutes.
Click OK.
5.
You are returned to the Policy Rules Management tab.
Repeat steps 1 through 5 and create additional rules, if required.
6.

Step 5. Reorder Policy Rules

For maintaining priority levels, Certificate Management System supports a linear
list of policy rules in increasing order of priority. This means that for a given policy
category in the configuration file, a policy configuration with a lower priority
precedes one with a higher priority. This simple linear listing avoids the need to
have explicit locking on request attributes to prevent conflicting changes. By
ordering the rules, you introduce a concurrency control whereby a higher-priority
rule configuration overwrites any changes made by a lower-priority rule
configuration that precedes it.
You may want to specify policies at different priority levels for the same operation
depending on the end-entity information. For example, authentication policies, if
any, need to precede others in the list.
To reorder policy rules in the CMS configuration:
In the Policy Rules Management tab, click Reorder.
1.
The Reorder Policy Rules window appears. It lists configured policy rules in
the order in which they are executed by the subsystem.
Configuring Policy Rules for a Subsystem
Chapter 18 Setting Up Policies 599