The APPLICATION sections
The APPLICATION sections identify the application domains supported by PKI Services. The default certificate templates file (pkiserv.tmpl) ships with two applications sections, PKISERV (for PKI administrators) and CUSTOMERS (for general users).
The format of the APPLICATION sections is:
- <APPLICATION NAME=appl-name>…</APPLICATION>
- Each application section begins with an application name definition. Examples:
- <APPLICATION NAME="PKISERV">
- This application contains support for all templates and functions.
- <APPLICATION NAME="CUSTOMERS">
- This application contains support for all templates and functions but does not include the button on the bottom of the PKI Services home page that directs users to the administration page.
Each APPLICATION section can contain the subsections that are shown in Table 1.
| Section or subsection | Contents |
|---|---|
| CONTENT | HTML for the "PKI Services Certificate Generation Application" web page. (For a sample of this web page, see Figure 1.)This subsection should contain one or more named fields (see What are named fields?) identifying certificate templates to use for requesting or managing certificates through this application. These template names should match the HTML selection value that is associated with them. |
| FAILURECONTENT | This subsection contains the HTML for the web page that is displayed when the certificate request submit failed. Any named fields in this subsection are interpreted as content inserts defined by INSERT sections. For PKISERV, the INSERT sections are included as part of the HTML presented to the end user. |
| FINDRECOVERCONTENT | This subsection contains the information for
recovering a certificate in the case where the user has forgotten
the passphrase. Note: Only certificates whose keys were generated by PKI Services are recoverable.
|
| RECONTENT | HTML for the web page "Renew or revoke a browser certificate". The web page displays information about a certificate so that the end user can confirm that this is the correct certificate to renew or revoke. (For a sample of this web page, see Figure 2.)This subsection uses the substitution variable [printablecert], which contains the data that is extracted from the ICL entry. (See What are substitution variables?.) |
| RECONTENT2 | This subsection is similar to the RECONTENT section except that it applies to a certificate whose key was generated by PKI Services and is to be revoked. |
| RECOVERCONTENT | This subsection contains HTML and JavaScript functions to recover a previously issued certificate whose key was generated by PKI Services. |
| RENEWEDCERT | This subsection contains HTML and JavaScript functions to install an automatically renewed certificate that is copied from an email notification if using the Internet Explorer browser. |
| RESUCCESSCONTENT | Contains only the named field %%-renewrevokeok%% (whose associated INSERT contains HTML for the web page "Request submitted successfully"). |
| REFAILURECONTENT | Contains only the named field %%-renewrevokebad%% (whose associated INSERT contains HTML for the web page "Request was not successful").The web page is displayed to the end user when a renewal or revocation request is unsuccessful. |
| RETRIEVECONTENT2 | This subsection contains the HTML to allow the end user to retrieve a recovered certificate. |
| RETURNCERT | This subsection contains the HTML for the web page that is displayed upon successful retrieval of a recovered certificate. This section contains the named field %%returnp12cert%%, which indicates a PKCS #12 format. |
| ADMINSCOPE | This subsection is for an administration page. It contains only the named field %%SelectCADomain%% to prompt the administrator to choose a domain. (For more information, see Adding a new CA domain.) |
| ADMINHEADER | This subsection contains the general installation-specific HTML content for the header of all administration web pages. See Steps for customizing the administration web pages for more information. |
| ADMINFOOTER | This subsection contains the general installation-specific HTML content for the footer of all administration web pages. See Steps for customizing the administration web pages for more information. |