Using Certificate Profiles - dogtagpki/pki GitHub Wiki
-
AdminCert: Manual Administrator Certificate Enrollment
-
caAgentFileSigning: Agent-Authenticated File Signing
-
caAgentServerCert: Agent-Authenticated Server Certificate Enrollment
-
caCACert: Manual Certificate Manager Signing Certificate Enrollment
-
caDirPinUserCert
-
caDirUserCert: Directory-Authenticated User Dual-Use Certificate Enrollment
-
caDualCert: Manual User Signing & Encryption Certificates Enrollment
-
caECDirUserCert: Directory-Authenticated User Dual-Use ECC Certificate Enrollment
-
caInstallCACert: Manual Security Domain Certificate Authority Signing Certificate Enrollment
-
caOCSPCert: Manual OCSP Manager Signing Certificate Enrollment
-
caOtherCert: Other Certificate Enrollment
-
caServerCert: Manual Server Certificate Enrollment
-
caSignedLogCert: Manual Log Signing Certificate Enrollment
-
caStorageCert: Manual Data Recovery Manager Storage Certificate Enrollment
-
caSubsystemCert: Manual Subsystem Certificate Enrollment
-
caTPSCert: Manual TPS Server Certificate Enrollment
-
caTransportCert: Manual Data Recovery Manager Transport Certificate Enrollment
-
caUserCert: Manual User Dual-Use Certificate Enrollment
-
caUserSMIMEcapCert: Manual User Dual-Use S/MIME capabilities Certificate Enrollment
-
caUUIDdeviceCert: Manual device Dual-Use Certificate Enrollment to contain UUID in SAN
-
DomainController: Domain Controller
-
acmeServerCert: ACME Server Certificate Profile
-
caDirUserRenewal: Directory-Authenticated User Certificate Self-Renew profile
-
caManualRenewal: Renew certificate to be manually approved by agents
-
caSSLClientSelfRenewal: Self-renew user SSL client certificates
The following profiles are used internally for installation:
Hidden Profiles
-
caAdminCert
-
caCrossSignedCACert
-
caDualRAuserCert
-
caECDualCert
-
caECUserCert
-
caEncECUserCert
-
caEncUserCert
-
caIPAserviceCert
-
caJarSigningCert
-
caRAagentCert
-
caRACert: Manual Registration Manager Signing Certificate Enrollment
-
caRARouterCert
-
caRAserverCert
-
caTempTokenDeviceKeyEnrollment
-
caTempTokenUserEncryptionKeyEnrollment
-
caTempTokenUserSigningKeyEnrollment
-
caTokenDeviceKeyEnrollment
-
caTokenMSLoginEnrollment
-
caTokenUserAuthKeyRenewal
-
caTokenUserDelegateAuthKeyEnrollment
-
caTokenUserDelegateSigningKeyEnrollment
-
caTokenUserEncryptionKeyEnrollment
-
caTokenUserEncryptionKeyRenewal
-
caTokenUserSigningKeyEnrollment
-
caTokenUserSigningKeyRenewal