Home
CA Functions
CA Activation
CA Structure & CRLs
Certificate Profiles
Certification Authorities
Crypto Tokens
Publishers
Validators
RA Functions
Add End Entity
End Entity Profiles
Search End Entities
VA Functions
OCSP Responders
Supervision Functions
Approval Profiles
Approve Actions
System Functions
Roles and Access Rules
Remote Authentication
Services
System Configuration
CMP Configuration
SCEP Configuration
System Configuration
My Preferences
RA Web
Members
Role : CMP RA Role
Back to Roles Management
Edit Access Rules
Match with
X509: C, Country
X509: DC, Domain Component
X509: ST, State or Province
X509: L, Locality
X509: O, Organization
X509: OU, Organizational Unit
X509: title, Title
X509: CN, Common name
X509: UID, User identifier
X509: serialNumber, Serial number in DN
X509: Certificate serial number (Recommended)
X509: E, E-mail address in DN
X509: RFC 822 Name (e-mail address)
X509: MS UPN, User Principal Name
X509: With full DN
X509: Any certificate issued by CA
CLI: Username
OAuth 2 JWT: Subject ("sub") claim
OAuth 2 JWT: Issuer ("iss") claim
OAuth 2 JWT: Audience ("aud") claim
OAuth 2 JWT: Object ID ("oid") claim
OAuth 2 JWT: Roles ("roles") claim
PublicAccessAuthenticationToken: Any transport (HTTP or HTTPS)
PublicAccessAuthenticationToken: Non-confidential transport (HTTP)
PublicAccessAuthenticationToken: Confidential transport (HTTPS)
CA
Irving ECC INT CA
Irving ECC ISS CA
Irving ECC Root CA
Irving PQC INT CA
Irving PQC ISS CA
Irving PQC Root CA
Irving RSA INT CA
Irving RSA Root CA
Irving RSA2048 ISS CA
Irving RSA4096 ISS CA
ManagementCA
Root CA
Sub CA
OAuth Provider
Match Operator
Match Value
Description
Action
X509: With full DN
Sub CA
-
Equal, case insens.
CN=georgekeypaircmp,C=US
Do Not Remove - Used for CMP cert issuance authentication