Skip to main content

Discretionary data

Discretionary data enables additional Global platform-specific data to be included in issued certificates. Values can be supplied during enrollment or configured as fixed values in a certificate profile. Supported formats include binary and ber_tlv.

JSON structure example

Discretionary data

"discretionary_data": {
  "include": "yes",
  "format": "binary",
  "allowed_source": [
    "user_supplied",
    "fixed_value"
  ]
}

Discretionary data with ber_tlv format

"discretionary_data": {
  "include": "yes",
  "format": "ber_tlv",
  "allowed_source": [
    "user_supplied",
    "fixed_value"
  ]
}

Parameters

Tabella 1. Parameters: Discretionary data

Name

Type

Required/optional

Possible values

discretionary_data

Object

Optional

Defines the discretionary data settings

..include

String

Optional

Specifies whether discretionary data is included in the certificate. Supported values include:

  • yes (default)

  • no

  • optional

.. format

String

Optional

Specifies the format of the discretionary data added to the certificate. The data value can be supplied as a hexadecimal string in a certificate profile or enrollment request. Supported values include:

  • binary (default) - stores discretionary data in an unspecified binary format. When this format is used, the discretionary data value from the certificate profile or enrollment request is added to the discretionary data tag in the certificate

  • ber_tlv - stores discretionary data using BER-TLV encoding. When this format is used, the discretionary data value from the certificate profile or enrollment request is added to the discretionary data tag in the certificate

allowed_source

Array of strings

Optional

Allows the discretionary data value to be provided in the enrollment request. Supported only for API, Portal, and Batch enrollment methods. Supported values include:

  • user_supplied - allows the discretionary data value to be provided in the enrollment request

  • fixed_value - uses a value defined in the certificate profile. This value is used only when no value is provided in the enrollment request


In questa sezione: