Skip to content

/AWS1/CL_ACAPRIVATEKEYFLAGSV3

Private key flags for v3 templates specify the client compatibility, if the private key can be exported, if user input is required when using a private key, and if an alternate signature algorithm should be used.

CONSTRUCTOR

IMPORTING

Required arguments:

iv_clientversion TYPE /AWS1/ACACLIENTCOMPATIBILITYV3 /AWS1/ACACLIENTCOMPATIBILITYV3

Defines the minimum client compatibility.

Optional arguments:

iv_exportablekey TYPE /AWS1/ACABOOLEAN /AWS1/ACABOOLEAN

Allows the private key to be exported.

iv_strongkeyprotectionrequ00 TYPE /AWS1/ACABOOLEAN /AWS1/ACABOOLEAN

Requirer user input when using the private key for enrollment.

iv_requirealternatesigalg TYPE /AWS1/ACABOOLEAN /AWS1/ACABOOLEAN

Reguires the PKCS #1 v2.1 signature format for certificates. You should verify that your CA, objects, and applications can accept this signature format.


Queryable Attributes

ExportableKey

Allows the private key to be exported.

Accessible with the following methods

Method Description
GET_EXPORTABLEKEY() Getter for EXPORTABLEKEY, with configurable default
ASK_EXPORTABLEKEY() Getter for EXPORTABLEKEY w/ exceptions if field has no value
HAS_EXPORTABLEKEY() Determine if EXPORTABLEKEY has a value

StrongKeyProtectionRequired

Requirer user input when using the private key for enrollment.

Accessible with the following methods

Method Description
GET_STRONGKEYPROTECTIONREQ00() Getter for STRONGKEYPROTECTIONREQUIRED, with configurable de
ASK_STRONGKEYPROTECTIONREQ00() Getter for STRONGKEYPROTECTIONREQUIRED w/ exceptions if fiel
HAS_STRONGKEYPROTECTIONREQ00() Determine if STRONGKEYPROTECTIONREQUIRED has a value

RequireAlternateSignatureAlgorithm

Reguires the PKCS #1 v2.1 signature format for certificates. You should verify that your CA, objects, and applications can accept this signature format.

Accessible with the following methods

Method Description
GET_REQUIREALTERNATESIGALG() Getter for REQUIREALTERNATESIGNATUREALG, with configurable d
ASK_REQUIREALTERNATESIGALG() Getter for REQUIREALTERNATESIGNATUREALG w/ exceptions if fie
HAS_REQUIREALTERNATESIGALG() Determine if REQUIREALTERNATESIGNATUREALG has a value

ClientVersion

Defines the minimum client compatibility.

Accessible with the following methods

Method Description
GET_CLIENTVERSION() Getter for CLIENTVERSION, with configurable default
ASK_CLIENTVERSION() Getter for CLIENTVERSION w/ exceptions if field has no value
HAS_CLIENTVERSION() Determine if CLIENTVERSION has a value