Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 508

Configuring Authentication for End-User Enrollment
certificates, successive certificate requests would fail because the PIN has been
removed from the master directory. This way, even if the Registration Manager
authenticates successive requests, the Certificate Manager rejects them, thus
ensuring that a user has only one certificate.
If you are not familiar with the Attribute Present Constraints policy, see section
"AttributePresentConstraints Plug-in Module" in Chapter 3, "Constraints Policy
Plug-in Modules" of CMS Plug-Ins Guide.
Note that unlike some of the other policy rules, Certificate Management System
does not create an instance of the Attribute Present Constraints policy rule during
installation. If you created this rule after installation, you can configure the server
to use that rule. The instructions below explain how to create a new rule:
Log in to the CMS window for the Certificate Manager (see "Logging In to the
1.
CMS Window" on page 333).
Select the Configuration tab.
2.
In the navigation tree, select Certificate Manager, and then select Policies.
3.
The Policy Rules Management tab appears. It lists currently configured policy
rules.
Click Add.
4.
The Policy Plugin Implementation window appears.
508 Netscape Certificate Management System Installation and Setup Guide • March 2002