2.2.5.1 Certificate Lifecycle Manager Configuration Fields

The following table describes the fields of Certificate Lifecycle Manager Configuration:

Table 2-40 Certificate Lifecycle Manager Configuration Fields

Fields	Description	Data Input Notes
OCLM Node IP Address	IP address of the OCLM node.	Required. Must be a valid IPv4 or IPv6 address. Maximum length is 39 characters. The OCLM Node IP Address and Port combination must be unique. This field is read-only when editing an existing configuration.
Port	Port at which the OCLM node can be accessed.	Required. Default: 8989. Range: Integer with value between 1 and 65535. The OCLM Node IP Address and Port combination must be unique. This field is read-only when editing an existing configuration.
Renew Before Expiry	Number of days before certificate expiry when renewal is requested.	Required. Default: 14 Range: Integer with value between 1 and 365. Note: Configure value should be atleast 15 days to provide enough time for investigating and resolving any renewal issues.
Key Algorithm	Public key algorithm to be used for certificates generated through the OCLM node.	Required. Supported value: RSA
Key Size	Number of bits in the generated key.	Supported values: KEYSIZE_2048 and KEYSIZE_4096. Default: KEYSIZE_2048
Key Encoding	Output format of the private key.	Required. Supported value: PEM Default: PEM
Basic Constraints	Basic constraints value used for certificates generated through the OCLM node.	System generated. Value: END_ENTITY This field appears in the table and is not editable from the GUI form.
Version	Certificate version format used for certificates generated through the OCLM node.	System generated. Value: X509. This field appears in the table and is not editable from the GUI form.

Note:

If Enable OCLM Feature is not enabled in General Options, Certificate Lifecycle Manager configuration cannot be inserted.