Tag Elements Beginning with C > <certificate-id> (configuration/security/pki/auto-re-enrollment)

Usage

<configuration>
    <security>
        <pki>
            <auto-re-enrollment>
                <certificate-id>
                    <name>name</name> <!-- identifier -->
                    <ca-profile-name>ca-profile-name</ca-profile-name> <!-- mandatory -->
                    <challenge-password>challenge-password
                                    </challenge-password> <!-- mandatory -->
                    <re-enroll-trigger-time-percentage>re-enroll-trigger-time-percentage
                                    </re-enroll-trigger-time-percentage> <!-- mandatory -->
                    <validity-period>validity-period</validity-period>
                    <re-generate-keypair/>
                </certificate-id>
            </auto-re-enrollment>
        </pki>
    </security>
</configuration>

Description

Auto re-enrollment configuration for certificate-id.

Contents

<ca-profile-name>—Name of certificate authority profile.

<challenge-password>—Password used by CA for enrollment and revocation.

<name>—Cerificate identifier that needs auto re-enrollment.

<re-enroll-trigger-time-percentage>—Re-enrollment trigger time before expiration as percentage.

<re-generate-keypair>—Generate new key-pair for auto-re-enrollment.

<validity-period>—Certificate validity period in days from enrollment start date.