461
Usage guidelines
If you do not specify a policy name, this command displays information about all certificate-based
access control policies.
Examples
# Display information about certificate-based access control policy mypolicy.
<Sysname> display pki certificate access-control-policy mypolicy
Access control policy name: mypolicy
Rule 1 deny mygroup1
Rule 2 permit mygroup2
# Display information about all certificate-based access control policies.
<Sysname> display pki certificate access-control-policy
Total PKI certificate access control policies: 2
Access control policy name: mypolicy1
Rule 1 deny mygroup1
Rule 2 permit mygroup2
Access control policy name: mypolicy2
Rule 1 deny mygroup3
Rule 2 permit mygroup4
Table 58 Command output
Total PKI certificate access control
policies
Total number of certificate-based access control policies.
permit
Permit certificates that match the attribute group in the access control
rule.
deny
Deny certificates that match the attribute group in the access control
rule.
Related commands
pki certificate access-control-policy
rule
display pki certificate attribute-group
Use display pki certificate attribute-group to display information about certificate attribute groups.
Syntax
display pki certificate attribute-group [ group-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
group-name: Specifies a certificate attribute group by its name, a case-insensitive string of 1 to 31
characters.