pki certificate access-control-policy name

Function

The pki certificate access-control-policy name command creates a certificate access policy and displays the certificate access policy view, or displays the view of an existing certificate access policy.

The undo pki certificate access-control-policy name command deletes a certificate access policy.

By default, no certificate access policy is created.

Format

pki certificate access-control-policy name policy-name

undo pki certificate access-control-policy name policy-name

Parameters

Parameter	Description	Value
policy-name	Specifies the name of a certificate access policy.	The value is a string of 1 to 32 case-insensitive characters without spaces and question marks. If the character string is enclosed in double quotation marks, it can contain spaces and question marks.

Views

System view

Default Level

2: Configuration level

Usage Guidelines

A certificate access policy is an extra measure for certificate verification. Only the certificates meeting specific requirements can pass verification. This enhances control on users' access rights.

Example

# Create the certificate access policy policy1 and enter its view.

<sysname> system-view
[sysname] pki certificate access-control-policy name policy1
[sysname-pki-access-policy1]