When create-ldap-entry is false, use the following set of parameters to define each user variable CA Gateway supplies to Entrust Authority Entrust Certificate Authority. 

Where <i> is an integer value number starting at 0. For example:

ca-variable-0-type: UserType
ca-variable-0-name: cn
ca-variable-0-value: <firstname>
ca-variable-0-in-dn: true
ca-variable-1-type: UserType
ca-variable-1-name: sn
ca-variable-1-value: <lastname>
ca-variable-1-in-dn: false
ca-variable-2-type: Custom
ca-variable-2-name: email
ca-variable-2-value: <email>
ca-variable-2-in-dn: false

Mandatory: Only when create-ldap-entry is false.

ca-variable-<i>-type

The type of variable. Supported values are:

  • CertType
  • Custom
  • UserType
  • Variable

ca-variable-<i>-name

The name of the Managed CA variable. See the table below for examples.

name

type

Value

​cn

UserType

Common Name attribute in the directory.

sn

UserType

Serial Number attribute in the directory.

email

Custom

The certificate subject's email. Entrust Authority Entrust Certificate Authority and clients like UMS understand the email variable, so no additional configuration is necessary. 

ca-variable-<i>-value

The value of the Managed CA variable. This value must include one or more substrings surrounded by angle brackets. For example:

  • <firstname> for the user's first name. 
  • <lastname> for the user's last name. 

Client applications will provide the actual values during enrollment. 

ca-variable-<i>-in-dn

true to include the variable value in the user's Distinguished Name (DN), false to exclude the variable value from the user DN.