Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual page 571

After installation, you must verify whether you want to use these rules, check how
these rules are configured, and make the appropriate configuration changes. Keep
in mind some of these policy rules are essential for the server to process requests.
For example, the server won't be able to process certificate-issuance requests if
DefaultValidityRule
certificate-renewal requests if
If you don't want to use a rule, delete it from the configuration as explained in
"Step 3. Delete Unwanted Policy Rules" on page 574; alternatively, you may keep it
in the disabled state. If you want to create a new rule, you can do so as explained
"Step 4. Add New Policy Rules" on page 574.
Default policy rules created for a Certificate Manager
Figure 18-1
Table 18-3 Default policy rules of a Certificate Manager and Registration Manager
Policy rule name
KeyAlgRule
DSAKeyRule
RSAKeyRule
DefaultValidityRule
RenewalConstranitsRule
is disabled. Similarly, the server won't be able to process
DefaultRenewalValidityRule
Certificate Manager
Yes
Yes
Yes
Yes
Yes
Configuring Policy Rules for a Subsystem
is disabled.
Registration Manager
Yes
Yes
Yes
Yes
Yes
Chapter 18 Setting Up Policies 571