5.3 Smart Card Enrollment eDirectory Attributes

Restrict the administration of the user attributes used for smart card authentication to administrators who are enrolling smart cards for users.

When matching by subject names, the attributes are:

  • sasAllowableSubjectNames

  • nclTmpCertSubject

  • nclTmpCertExpiration

When matching by certificates, the attributes are:

  • userCertificate

  • nclTmpCert

  • nclTmpCertExpTime