Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 490 / 874

Configuring Policy Rules for a Subsystem
490 Netscape Certificate Management System Administrator’s Guide • June 2003
5.
In the Policy Rule list, select a rule that you want to modify.
For the purposes of this instruction, assume that you selected the rule named
DefaultValidityRule
.
6.
Click Edit/View.
The Policy Rule Editor window appears, showing how this rule is configured.
7.
Make the necessary changes and click OK.
You are returned to the Policy Rules Management tab.
8.
Repeat steps 5 through 7 for the remaining rules.
9.
Click Refresh.
Deleting Policy Rules
You can delete any unwanted policy rules from the CMS configuration. If you
think you might need a rule in the future, instead of deleting it from the
configuration you should disable it by deselecting the
enable
parameter. In this
way, you can avoid re-creating the rule in the future. Because the subsystems
subject end-entity requests only to rules that are currently enabled, keeping
unwanted rules in the disabled state in the configuration does not affect policy
decisions made by a subsystem.
To delete a policy rule from the CMS configuration:
1.
In the Policy Rules Management tab, select the rule you want to delete and
click Delete.
2.
When prompted, confirm the delete action.
The CMS configuration is modified. If the changes you made require you to
restart the server, you will be prompted accordingly. Don’t restart the server
yet; you can do so after you’ve made all the required changes.
Adding New Policy Rules
Adding a policy rule to the CMS configuration involves creating a new instance of
an already registered policy plug-in module, assigning a unique name for the
instance, and entering appropriate values for the parameters that define the
module you want to create an instance of.