Netscape Certificate Management System 6.0, Manual

Page: 189 / 377

KeyUsageExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 189
In the CMS window, the module is identified as
KeyUsageExt
. Figure 4-12 shows
how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-12 Parameters defined in the KeyUsageExt module
The configuration shown in Figure 4-12 creates a policy rule named
KeyUsageExtForClientCert
, which enforces a rule that the server should set the
key usage extension (
digitalSignature
,
nonRepudiation
, and
keyEncipherment
bits) in client certificates.
Table 4-15 gives details about each of these parameters.