Netscape Certificate Management System 6.0, Manual

Page: 244 / 377

SubjectKeyIdentifierExt Plug-in Module
244 Netscape Certificate Management System Plug-Ins Guide • March 2002
In the CMS window, the module is identified as
SubjectKeyIdentifierExt
.
Figure 4-29 shows how the configurable parameters for the module are displayed
in the CMS window.
Figure 4-29 Parameters defined in the SubjectKeyIdentifierExt module
The configuration shown in Figure 4-29 creates a policy rule named
SubKeyIDExtForAllCert
, which enforces a rule that the server should set the
subject key identifier extension in all certificates.
Table 4-28 provides details for each of these parameters.
Table 4-28 Description of configuration parameters defined in the SubjectKeyIdentifierExt module
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Check the box to enable the
rule. Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the server
adds the subject key identifier extension to certificates specified by the
predicate
parameter.
• If you disable the rule, the server does not add the extension to certificates; it
ignores the values in the remaining fields.