4.15 Public Key Flags

The following tables provide the public key flags:

4.15.1 Certificate Authority Public Key Flags

Use the following flag for creating an Organizational Certificate Authority (CA):

Value

Name

Description

0x0001 | 0x0002 | 0x0020

PUBLIC_KEY_ORGANIZATIONAL_CA

Use when creating a CA.

4.15.2 End Entity Certificate Creation Public Key Flags

Use one of the following flags for creating user and server certificates:

Value

Name

Description

0x0002 | 0x0020 | 0x0100

PUBLIC_KEY_SINGLE_SERVER

Use when the key generation server is the same as the CA server.

0x0004 | 0x0010 | 0x0100

PUBLIC_KEY_TWO_SERVER

Use when the key generation server is not the same as the CA server.

0x0004 | 0x0010 | 0x0100

PUBLIC_KEY_EXTERNAL_CA

Use when the CA is external to Novell.

4.15.3 Optional Certificate Creation Public Key Flags

Value

Name

Description

0x00001000

PKI_CUSTOM_SUBJECT_NAME

Use when the subject name is not the default.

0x100

PKI_WAIVE_SUBJECT_NAME_IN_CERTIFICATE

Use when the subject name of the PKCS #10 CSR is not the subject name returned in the X.509 certificate.

4.15.4 Server Private Key and Certificate Flag

Value

Name

Description

0x01

PKI_OVERWRITE

Use to allow import of a server private key and certificate.