000012299 - How to generate certificates via RCM-API that include custom attribute in subject DN

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000012299
Applies ToRSA Certificate Manager API 6.8
IssueHow to generate certificates via RCM-API that include custom attribute in subject DN
How to generate a certificate via RCM-API that includes a custom attribute in subject DN
ResolutionCustom attribute(s) with static/default values defined in the jurisdiction can automatically be added to certificates issued through RCM-API.  There is no need to explicitly set the custom attribute in Subject DN of the request object in RCM-API application; following the steps listed below will result in certificates issued with custom attribute(s) automatically included in the subject DN:

- Ensure that the custom attribute is marked as Required and a default/static value has been assigned to it in Certificate Attributes section of the jurisdiction configuration
- Enable 'Enforce Subject DN Definition' option in Certificate Attributes section in the jurisdiction
- Set regular Subject DN attributes, other than the customer attribute(s), in the request object as needed via RCM-API, e.g., see API sample programs like CASignCertificate or CASignCertWithEnforceProfile
Legacy Article IDa49717