Download Manual - KeyTalk

The HwSig formula results in a hash calculated over the chosen
components. This hash is optionally used provided the feature is
activated in the “Required Credentials” of the Service.
The formula is comma separated and can contain the HwSig
8
HwSIG Formula
component number references in any order and as often as you
like. Do note that order and repetition of component numbers
matter.
For example: 0,1,2,3,4,5 or 0,0,0,6,7,3,3,8,9,14,11
For more information on the HwSig, please refer to Section 18.2
’Hardware Signature’.
Indicates whether an authentication module should split a fully-
9
Split Domain
qualified userid supplied as domain\userid on two separate
and Userid
credentials. Currently only LDAP authentication module supports
domain credentials.
10
Add 3 Random
When selected three random characters are added to the Common
Characters to
Name of the generated user certificate. This option is only needed
CN
for backward compatibility.
11
Country
12
State
13
City/Locality
14
Organization
15
16
17
18
19
The default value of the country code (ISO 3166 standard) as it
should occur in the user certificate.
The default value of the state, county or province as it should
occur in the user certificate.
The default value of the city/locality as it should occur in the user
certificate.
The default value of the organization as it should occur in the user
certificate.
Organizational
The default value of the organizational unit as it should occur in
Unit
the user certificate.
Email
The default value email address of the organization as it occurs in
the user certificate.
Time To Live
The default amount of time, expressed in seconds, that a
(sec)
certificate is valid from the time it was issued.
Time For
The default time correction factor, expressed in seconds, to
Correction (sec)
correct problems when the Client system time is slightly off.
Basic
Constraints
CA:FALSE = The generated certificate is a user certificate.
CA:TRUE = The generated certificate is a CA certificate and is
allowed to issue certificates (for advanced use only).
digitalSignature = Allows for digital signing
nonrepudiation = Qualifies a digital signature for non-repudiation
20
Key Usage
keyEncipherment = Allows for encryption of keys
dataEncipherment = Allows for encryption of data
keyAgreement = Allows for SSL/key handshaking
21
Extended Key
Used for 802.1x EAP/TLS user certificate based authentication.
50