Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual page 532

Extension-Specific Policy Module Reference
Unlike some of the other policy modules, CMS does not create an instance of the
issuer alternative name extension policy during installation. If you want the server
to add this extension to certificates, you must create an instance of the
IssuerAltNameExt
Add New Policy Rules" in Chapter 18, "Setting Up Policies" of CMS
Administrator's Guide.
Table 11-25 IssuerAltNameExt Configuration Parameters
Parameter
enable
predicate
critical
numGeneralNames
generalName<n>.general
NameChoice
532 Netscape Certificate Management System Administrator's Guide • February 2003
module and configure it. For instructions, see section "Step 4.
Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect
to disable.
Specifies the predicate expression for this rule. If you want this rule to be
applied to all certificate requests, leave the field blank (default). To form a
predicate expression, see section "Using Predicates in Policy Rules" in
Chapter 18, "Setting Up Policies" of CMS Administrator's Guide.
Example: HTTP_PARAMS.certType==ca
Specifies whether the extension should be marked critical or noncritical.
Select to mark critical (default), deselect to mark noncritical.
Specifies the total number of alternative names or identities permitted in
the extension. Note that each name has a set of configuration
parameters—generalName<n>.generalNameChoice and
generalName<n>.generalNameValue—and you must specify
appropriate values for each of those parameters; otherwise the policy rule
will return an error. You can change the total number of identities by
changing the value specified in this field; there's no restriction on the total
number of identities you can include in the extension. Each set of
configuration parameters is distinguished by <n>, which is an integer
derived from the value you assign in this field. For example, if you set the
numGeneralNames parameter to 2, <n> would be 0 and 1.
Permissible values: 0 or n.
• 0 specifies that no identities can be contained in the extension (default).
• n specifies the total number of identities to be included in the extension;
it must be an integer greater than zero. The default value is 8.
Example: 2
Specifies the general-name type for the alternative name you want to
include in the extension.