PKI role

The PKI role extension defines the PKI role assigned to the certificate holder.

This is a custom Daimler extension with OID: 1.3.6.1.4.1.2916.3.6.509.5.101

JSON structure example

"extensions": {
  "pki_role": {
    "critical": true,
    "allow_critical_override": true,
    "include": "yes",
    "allowed_values": [
      "enhanced_rights"
    ],
    "default_value": "enhanced_rights"
  }
}

Parameters

tabla 1. Parameters: PKI role

Name	Type	Required/optional	Possible values
`critical`	Boolean	Optional	Specifies whether the extension is marked as critical. Supported values include: `true`: Marks the extension as critical `false`: Does not mark the extension as critical
`allow_critical_override`	Boolean	Optional	Specifies whether the critical setting can be overridden in the certificate profile or enrollment request. Supported values include: `true`: Allows the critical setting to be overridden in the certificate profile or enrollment request `false`: Uses the critical setting defined in the certificate template
`include`	String	Optional	Specifies whether the extension is included in the attribute certificate. Supported values include: `yes`: Always includes the extension `no`: Excludes the extension `optional`: Includes the extension when a value is provided.
`allowed_values`	Array of strings	Required	Specifies the PKI role values that the extension supports. Supported values include: `ecu_int_proc (0x00)` `root_ca (0x01)` `backend_ca (0x02)` `diagnostic_authentication (0x03)` `ecu (0x04)` `enhanced_rights (0x05)` `variant_coding_device (0x07)` `variant_coding_user (0x09)` `root_ca_link_cert (0x0A)` `backend_ca_link_cert (0x0B)`
`default_value`	String	Optional	Specifies the default value to use when the enrollment request does not provide a value.

En esta sección: