Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Administration Manual

Page: 230 / 554

Chapter 8. Token Processing System
208
Parameter Description
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
op.enroll.
tokenType
.keyGen.encryption.recovery.onHold.scheme The recovery scheme for encryption certificates
for tokens that are to be put on hold. The
valid values are
GenerateNewKey
and
RecoverLast
.
op.enroll.
tokenType
.keyGen.encryption.recovery.onHold.revokeCert Specifies if the encryption certificate should be
revoked if the token's key has been comprised.
The valid values are
true|false
.
op.enroll.
tokenType
.keyGen.encryption.recovery.onHold.revokeCert.reason Specifies what the signing certificate revocation
reason should be. The default value is
0
. The
valid values are as follows:
• 0 - Unspecified.
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
op.enroll.
tokenType
.keyGen.tokenName The name of the token to use. The TPS can
substitute some special strings. For example,
if using
cuid
, the
tokenName
is substituted
with the CUID of the token; if using
uid
, the
tokenName
is substituted with the UID of the
authenticating user.
op.enroll.
tokenType
.keyGen.keyType.num The number of keys/certificates to be generated
for the profile. The values are integers. The
default is
2
.
op.enroll.
tokenType
.keyGen.keyType.value.
n
Specifies
keyType
. The default values are
signing|encryption
.
op.enroll.
tokenType
.keyGen.signing.keySize Specifies the key size to use for key generation.
The default is
1024
.
Do not alter these values.
• op.enroll.
tokenType
.keyGen.signing.public.keyCapabilities.encrypt