Edit ValidityRule

Use this page to set the default values and restrictions for the ValidityRule policy, which enforces a maximum and minimum period of time that manually authenticated requests can specify for certificate validity. For example, if the default maximum validity period is set to 1825 days (5 years) and a certificate request asks for a 3650 day (10 year) validity period, then this policy will reject this request. All values must be specified in days for this parameter.

For SSL or Oracle9iAS Single Sign-On (SSO) authenticated users, you can set the Default Validity period parameter, which automatically populates for those type of requests.

Note: When enabled, this policy applies to all certificate requests from both clients and servers. To provide different limits for certificate requests from particular DNs, use predicates as described in the following section.

You can modify the following parameters and restrictions for this policy:

Parameter Details

Predicate Details

Predicate expressions are optional, altering application of this policy when an incoming request matches a predicate expression. A policy with no predicates applies to all requests. For example, the following predicate expression specifies that client SSL certificate requests use the maximum and minimum validity periods selected with this predicate:

Type=="client" AND Usage=="ssl"

For detailed information about predicate expression syntax, see the Oracle Certificate Authority Administrator's Guide.

The buttons at the bottom of the page perform the functions described in the following table:

Related Topics

• Editing Policies

• Adding Predicates to Policy Rules

• Reordering Predicate Precedence in Policy Rules

• Deleting Predicates from Policy Rules