Use this page to enable and set the default values and restrictions for the UniqueCertificateConstraints policy, which limits each user to a single certificate for each specific usage or allows a user to have multiple certificates for each usage. If enabled, this policy verifies whether there are certificates in the repository that match the subject DN of the incoming certificate request. If a certificate with a matching DN is found and Allow multiple certificates is unchecked (FALSE), then the server also verifies whether certificate usage is the same. If a certificate with the same usage is found, then Oracle Certificate Authority will not issue another certificate with the same usage to the same subject DN.
You can modify the following parameters and restrictions for this policy:
Allow multiple certificates Default Value
If this parameter is checked (TRUE), then Oracle Certificate Authority will issue a certificate although there may be multiple certificates with the same subject DN and the same usage. If this parameter is left unchecked (FALSE), then the server will not issue multiple certificates with the same usage to the same subject DN.
Predicate expressions are optional, altering application of this policy when an incoming request matches a predicate expression. A policy with no predicates applies to all requests. For example, the following predicate expression specifies that client certificate requests from the Acme Company's accounts payable department, located in Trenton, New Jersey, USA (ou=acct_pay,loc=trenton,o=acme,c=us) can get multiple certificates for the same DN and usage:
Type=="client" AND DN=="ou=acct_pay,loc=trenton,o=acme,c=us"
Allow multiple certificates value set to TRUE.
For detailed information about predicate expression syntax, see the Oracle Certificate Authority Administrator's Guide.
The buttons at the bottom of the page perform the functions described in the following table:
|
Button Name |
Function Description |
|---|---|
|
Revert |
Click this button to reset all changed parameters and predicates to their previous values. |
|
Apply |
Click this button to apply any changes made to this page. |
|
Cancel |
Click this button to cancel any changes made to this page and return to the main Policy page. |
|
OK |
Click this button to return to the main Policy page. Any changes made to this page are automatically saved. |