CA EEM Release Notes › Changes to Existing Features › Changes to Safex XML

Changes to Safex XML

The following tags are added to the Safex XML to support certificates during application registration with CA EEM:

• PEM certificates

  <Register certtype="pem" certfile="RBC_Hospital.pem" keyfile="RBC_Hospital.key" password="RBC_Hospital">

  • Where
  • certfile

    Specifies the name of the PEM certificate file.

  • keyfile

    Specifies the private key file.

  • password

    Specifies the password required to read the pem file. In FIPS-only mode, password tag must be blank.

• P12 certificates

  <Register certtype="p12" certfile="RBC_Hospital.p12" password="RBC_Hospital">

  • certfile

    Specifies the name of the P12 file.

  • password

    Specifies the password required to read the P12 file.

• P11 certificates

  <Register certtype="p11" pkcs11lib="pkcs11lib" token="token" userpin="userpin" id="id" sensitive="true">

  • Where
  • pkcs11lib

    Specifies the path to the PKCS11 library implementation.

  • token

    Specifies the hardware token name.

  • userpin

    Specifies the user pin required to log in.

  • id

    Specifies the certificate label.

  • sensitive

    Specifies if the private key is treated as sensitive data or not. If the private key path is specified as sensitive, the private key cannot be copied.

    Value: [True|False].