Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора, Страница: 194 / 512

Chapter 7. Token Processing System
174
Parameter Description
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
op.enroll.
tokenType
.keyGen.encryption.recovery.keyCompromise.scheme Specifies encryption certificate recovery scheme
for tokens whose key is compromised. The
valid values include
GenerateNewKey
and
RecoverLast
.
op.enroll.
tokenType
.keyGen.encryption.recovery.keyCompromise.revokeCert Specifies if the encryption certificate should be
revoked if the token's key has been comprised.
The valid values are
true|false
.
op.enroll.
tokenType
.keyGen.encryption.recovery.keyCompromise.revokeCert.reason Specifies what the signing certificate revocation
reason should be. The default value is
0
. The
valid values are as follows:
• 0 - Unspecified.
• 1 - Key compromised.
• 2 - CA key compromised.
• 3 - Affiliation changed.
• 4 - Certificate superseded.
• 5 - Cessation of operation.
• 6 - Certificate is on hold.
op.enroll.
tokenType
.keyGen.recovery.onHold.keyType.num The number of key types for the tokens to put on
hold for temporary loss reasons. The valid values
are integers. The default is
2
.
op.enroll.
tokenType
.keyGen.recovery.onHold.keyType.value.
n
Specifies
keyType
. The default values are
signing|encryption
.
op.enroll.
tokenType
.keyGen.signing.recovery.onHold.scheme The recovery scheme for signing certificates
for tokens that are to be put on hold. The
valid values are
GenerateNewKey
and
RecoverLast
.
op.enroll.
tokenType
.keyGen.signing.recovery.onHold.revokeCert Specifies if the signing certificate should be
revoked if the token's key has been comprised.
The valid values are
true|false
.
op.enroll.
tokenType
.keyGen.signing.recovery.onHold.revokeCert.reason Specifies what the signing certificate revocation
reason should be. The default value is
0
. The
valid values are as follows:
• 0 - Unspecified.