Installing CA with Sequential Serial Numbers v2 - dogtagpki/pki GitHub Wiki
This document describes the process to install CA with Sequential Serial Numbers v2.
To enable SSNv2 for request IDs, specify the following parameters:
-
pki_request_id_generator=legacy2 -
pki_request_number_range_start=<decimal> -
pki_request_number_range_end=<decimal> -
pki_request_number_range_increment=<decimal> -
pki_request_number_range_minimum=<decimal> -
pki_request_number_range_transfer=<decimal>
To enable SSNv2 for certificate serial numbers, specify the following parameters:
-
pki_cert_id_generator=legacy2 -
pki_serial_number_range_start=<hexadecimal> -
pki_serial_number_range_end=<hexadecimal> -
pki_serial_number_range_increment=<hexadecimal> -
pki_serial_number_range_minimum=<hexadecimal> -
pki_serial_number_range_transfer=<hexadecimal>