Table of Contents
Advertisement
Defaults Reference
If enabled, the policy adds a Subject Key Identifier Extension to an enrollment
request if the extension does not already exist. If the extension exists in the request,
for example from a CRMF request, the default replaces the extension. In case of
agent-approved enrollments, after an agent approves the enrollment request, the
policy accepts any Subject Key Identifier Extension that is already there.
This default has not parameters. If used, this extension will be included in the
certificate with the public key information.
You can define the following constraints with this default:
•
Extension Constraint, see "Extension Constraint," on page 475.
•
No Constraints, see "No Constraint," on page 477.
Subject Name Default
This default populates server-side configurable subject name into the certificate
request. You provide a static subject name that is used as the subject name in the
certificate.
You can define the following constraints with this default:
•
Subject Name Constraint, see "Subject Name Constraint," on page 479.
•
No Constraints, see "No Constraint," on page 477.
Table 10-16 Subject Name Default Configuration Parameters
Parameter
Name
Token Supplied Subject Name Default
This default policy that populates subject name based on the attribute values in the
authentication token (AuthToken) object.
This default plugin works with the directory-based authentication manager. The
Directory-Based User Dual-Use Certificate Enrollment certificate profile has the
following input parameters: UID and Password. The directory-based
authentication manager will check if the given UID and password are correct.
470
Netscape Certificate Management System Administrator's Guide • February 2003
Description
Specify the subject name for this certificate.
Advertisement
Table of Contents
