|Applies To||RSA Certificate Manager 6.6|
Sun Solaris 2.8
Microsoft Windows Server 2003
|Issue||How to enter email address for P10 certificate request in RSA Certificate Manager|
PKCS #10 Request with Non-DN Attributes
|Resolution||This issue has been resolved in a hot fix for RSA Certificate Manager 6.6. Contact RSA Security Customer Support to request RSA Certificate Manager 6.6 Build 300 and higher, or download it from RSA SecurCare Online.|
When making a PKCS #10 certificate request (including cross certificates), you can now add additional certificate attributes. As a result of these additional attributes, the PKCS #10 Request Form and Cross Certificate PKCS #10 pages at the Enrollment Server now have an Additional Information section for the input of additional attribute information. The availability of additional attributes for a certificate request is set when configuring the issuing CA's jurisdiction. Fields are displayed in relation to the attributes selected and configured for the associated jurisdiction.
The Certificate Request Vettor page now allows an administrator or vettor to modify certificate attributes and then issue the requested certificate. Editable attributes are based on the configuration of the associated jurisdiction. These modifiable attributes are not included in the subject DN of the issued certificate.
- To add email to request page, go to the Jurisdiction setting, Certificate Attributes, and Add Type EA for email address
- Select it and only select the checkboxes for "Editable" and "Required"
- After saving this, go to certificate request page for a P10. You will now see a field at bottom for email address.
For more information, see the RSA Certificate Manager Administrator's Guide
|Legacy Article ID||a29065|