Digital Certificates › Digital Certificate Support › CPF Limitations

CPF Limitations

Some digital certificate commands are available for use with the Command Propagation Facility (CPF). However, the following CPF limitations exist for digital certificate commands.

Note: For complete information about CPF, see the CA Top Secret User Guide.

• Only the following certificate-related commands are sent through CPF:

  ADD

  Adds or replaces a certificate LABEL or the START, FOR, UNTIL, TRUST, HITRUST, and NOTRUST parameters.

  REMOVE

  Removes the certificate from the user.

  REPLACE

  Replaces a certificate LABEL or the START, FOR, UNTIL, TRUST, HITRUST, and NOTRUST parameters.

• The following keywords, issued by ADD, REMOVE, and REPLACE, are sent through CPF:
  • DIGICERT
  • ISSUERDN
  • KEYRING
  • LABLCERT
  • LABLRING
  • SERIALNM
• The following certificate-related commands are not sent through CPF:
  • CHKCERT
  • EXPORT
  • GENCERT
  • GENREQ
  • REKEY
  • ROLLOVER