CertificatePoliciesExt Plug-in ModuleChapter 4 Certificate Extension Plug-in Modules 153CertificatePoliciesExt RuleThe policy rule named CertificatePoliciesExt is an instance of theCertificatePoliciesExt module. Certificate Management System automaticallycreates this rule during installation. By default, the rule is configured as follows:• The rule is disabled; for the rule to be effective, it must be enabled andconfigured appropriately.• The predicate field is left blank so that the extension gets added to allcertificates.• The extension is marked noncritical (to comply with the PKIXrecommendation).• Other fields are left blank for you to enter the appropriate information.For details on individual parameters defined in the rule, see Table 4-5 on page 151.You need to review this rule and make the changes appropriate for your PKI setup.For instructions, see section “Step 2. Modify Existing Policy Rules” in Chapter 18,“Setting Up Policies” of CMS Installation and Setup Guide. For instructions onadding additional instances, see section “Step 4. Add New Policy Rules” in thedisplayText Specifies the textual statement to be included in certificates; this parametercorresponds to the explicitText field of the user notice. If you want to embed atextual statement (for example, your company’s legal notice) in certificates, thenadd that statement here. The text you enter here will be displayed to a relying partywhen the certificate is used or viewed.Note that certain applications may not have the capability to display this text. Also,embedding a policy statement in a certificate increases its size.If you specify values for both policyId and displayText parameters and if theapplication software cannot locate the notice text indicated by the policyIdparameter, then it is supposed to display the embedded notice; otherwise, it’ssupposed to display the information specified by the policyId parameter. (Thisfeature is application specific and Certificate Management System has no controlover it.)Permissible values: A string with up to 200 characters.Example: Siroe Corporation’s CPS incorp. by reference liab.ltd. (c)97 Siroe CorporationTable 4-5 Description of parameters defined in the CertificatePoliciesExt module (Continued)Parameter Description
