Table of Contents
Advertisement
To change the DirectoryString encoding:
Stop the Certificate Manager.
1.
Go to this directory:
2.
Open the configuration file,
3.
Add the encoding order to the configuration file.
4.
For example, if you want to specify two encoding values,
and
UniversalString
UniversalString
configuration file:
X500Name.directoryStringEncodingOrder=PrintableString,
UniversalString
Save your changes and close the file.
5.
To verify that the encoding order are in effect, enroll for a certificate using the
6.
manual enrollment form. Use
Go to the agent interface and approve your request.
7.
When you receive the certificate, use the
8.
encoding of the certificate. For details about the
Command-Line Tools Guide.
The CN component of the subject name should be encoded as a
UniversalString
Repeat Steps 6 through 8 above, but use
9.
The CN component of the subject name should be encoded as a
PrintableString.
Role of Distinguished Names in Certificates
In certificates issued by Certificate Management System, DNs are used to identify
the entity that owns the certificate. In all cases, if you are using Certificate
Management System with a directory, the format of the DNs in your certificates
should match the format of the DNs in your directory. It is not necessary that the
names match exactly; certificate mapping allows the subject DN in a certificate to
be different from the one in the directory. For more information, see Chapter 5,
"Mapper Plug-in Modules."
<server_root>/cert-<instance_id>/config
, in a text editor.
CMS.cfg
, and the encoding order is
next, you would add the following line at the end of the
"John_Doe"
.
DNs in Certificate Management System
PrintableString
PrintableString
for CN.
tool to examine the
dumpasn1
tool, see CMS
dumpasn1
for CN this time.
"John Smith
Appendix A
Distinguished Names
first and
319
Advertisement
Table of Contents
