PKI 10.5 CMC Profiles

In PKI 10.5, profileSubmitCMCFull servlet has been updated so that profile id can be specified. This provides flexible profile specification without having to add new URI’s as in PKI 10.4 CMC Profiles.

Here is an example from HttpClient configuration file:

servlet=/ca/ee/ca/profileSubmitCMCFull?profileId=caFullCMCUserSignedCert

where we expect the CMCUserSignedAuth authentication plugin to be specified in the profile caFullCMCUserSignedCert.cfg:

auth.instance_id=CMCUserSignedAuth

Some examples in the Examples section will use this method, and will be labeled for ease of distinction.

Note: I think the URIs in PKI 10.4 CMC Profiles still work at time of this writing, but one should try to use the new method described above.