DNs in Certificate Management SystemAppendix I Distinguished Names 791To change the DirectoryString encoding:1. Stop the Certificate Manager.2. Go to this directory: /cert-/config3. Open the configuration file, CMS.cfg, in a text editor.4. Add the encoding order to the configuration file.For example, if you want to specify two encoding values, PrintableStringand UniversalString, and the encoding order is PrintableString first andUniversalString next, you would add the following line at the end of theconfiguration file:X500Name.directoryStringEncodingOrder=PrintableString,UniversalString5. Save your changes and close the file.6. To verify that the encoding order are in effect, enroll for a certificate using themanual enrollment form. Use “John_Doe” for CN.7. Go to the agent interface and approve your request.8. When you receive the certificate, use the dumpasn1 tool to examine theencoding of the certificate. For details about the dumpasn1 tool, see CMSCommand-Line Tools Guide.The CN component of the subject name should be encoded as aUniversalString.9. Repeat Steps 6 through 8 above, but use "John Smith for CN this time.The CN component of the subject name should be encoded as aPrintableString.Role of Distinguished Names in CertificatesIn certificates issued by Certificate Management System, DNs are used to identifythe entity that owns the certificate. In all cases, if you are using CertificateManagement System with a directory, the format of the DNs in your certificatesshould match the format of the DNs in your directory. It is not necessary that thenames match exactly; certificate mapping allows the subject DN in a certificate tobe different from the one in the directory.
