A newer version of this documentation is available.

Custom BAM

[Custom BAM]
:EnrollAlwaysUnlock=1
EnrollParameters=KeySize=1024;KeyUsage=160;KeyReuse=false;Algorithm=1.2.840.113549.1.1.5;CryptographicToken
EnrollResponseURL=
EnrollRequestURL=
:ForceChangeBIDPIN=0
RenewParameters=KeySize=1024;KeyUsage=160;KeyReuse=false;Algorithm=1.2.840.113549.1.1.5
RenewRequestURL=
RenewResponseURL=
:RequestTime=0:0:86400:3:3

EnrollAlwaysUnlock

The EnrollAlwaysUnlock property is default and must never be changed.

EnrollAlwaysUnlock unlocks token at enrollment.

EnrollParameters

The EnrollParameters property is default and must never be changed.

EnrollParameters sets certificate parameters for enrollment.

EnrollResponseURL

Path to BAM store for certificate response files.

[Custom BAM]
EnrollResponseURL=file:///\\remote-path\BAM\Tmp_{name}.crt

EnrollRequestURL

EnrollRequestURL sets the path to BAM store for certificate request files.

[Custom BAM]
EnrollRequestURL=file:///\\remote-path\BAM\Tmp_{name}.req

ForceChangeBIDPIN

Currently not supported. Do not use.

Force change of both UPINO and BID PIN.

RenewParameters

This parameter is default and should never be changed.

RenewParameters sets certificate parameters for renewal.

RenewRequestURL

RenewRequestURL sets the path to BAM store for certificate renewal request files.

[Custom BAM]
RenewRequestURL=file:///\\remote-path\BAM\Rnv_{name}.req

RenewResponseURL

RenewResponseURL sets the path to BAM store for certificate renewal response files.

[Custom BAM]
RenewResponseURL=file:///\\remote-path\BAM\Rnv_{name}.crt

RequestTime

The RequestTime property is default and must never be changed.

RequestTime sets the time for certificate requests.

[Custom BAM]
RequestTime=<n/a>:<n/a>:<time for valid request>:<time to poll for request>:<poll rounds to accept non existing requests>