Skip Navigation

Update the database server

Values in the database server that are used in smart card authentication are stored in the GLB_CONFIG_TAB in the ngaddata database. These values include the following items:
  • The name of the HTTP header that contains the information.
  • The regular expression that is used to extract the information.
Version-specific notes
Version
Notes
6.1.8.84 CP9 and earlier
BlackBerry AtHoc
version 6.1.8.84 CP9 and earlier do not have a value in the GLB_CONFIG_TAB for the default HTTP header variable. It is hard-coded as SubjectCN.
7.0.0.2 and later
A Require Smart Card option is available that appears when you select Smart Card Login.
Smart card settings in PRV_SECURITY_POLICY_TAB
KEY_NAME
6.1.8.90 and earlier
7.0.0.2 and later
SMART_CARD_ENFORCED
Value is not present.
Value is present.
Y = value is present. N = value is not present.
Smart card settings in GLB_CONFIG_TAB
KEY_NAME
6.1.8.84 CP9
6.1.8.85 R3SP4 CP1
6.1.8.85 R3SP4CP1
(and hot-fixes)
7.3
ALT_HTTP_CAC_REGEX
Y
Y
Y
Y
ALT_HTTP_CAC_VARIABLE
Y
Y
Y
Y
CAC_CHECK_PRESENT
N
N
Y
Y
CAC_CHECK_VALID
N
N
Y
Y
CAC_REGEX
Y
Y
Y
Y
CAC_SAN_REGEX
N
N
N
Y
HTTP_CAC_REGEX
N
Y
Y
Y
HTTP_CAC_VARIABLE
N
Y
Y
Y
Definitions of smart card settings
KEY_NAME
Notes
ALT_HTTP_CAC_REGEX
(Operator log on) Alternate regular expression for extracting the mapping ID from the CAC certificate.
ALT_HTTP_CAC_VARIABLE
(Operator log on) Alternate HTTP header variable that contains the mapping ID from the CAC certificate.
CAC_CHECK_PRESENT
(Operator log on) Specifies if the system should check that the CAC certificate is present.
CAC_CHECK_VALID
(Operator log on) Specifies if the system should check that the CAC certificate is valid.
CAC_REGEX
Primary regular expression for extracting the mapping ID from the certificate data passed by the
BlackBerry AtHoc
desktop app during sign on.
CAC_SAN_REGEX
(Operator log on) Alternate regular expression to extract the email address from the Subject Alternative Name in the certificate.
HTTP_CAC_REGEX
Primary regular expression for extracting the mapping ID from the certificate during operator log on.
HTTP_CAC_VARIABLE
Primary HTTP header variable to search for mapping ID during Operator log on.
Correlation of smart card settings between the database and user interface
KEY_NAME
Visible in management system
ALT_HTTP_CAC_REGEX
No
ALT_HTTP_CAC_VARIABLE
No
CAC_CHECK_PRESENT
No
CAC_CHECK_VALID
No
CAC_REGEX
No
CAC_SAN_REGEX
No
HTTP_CAC_REGEX
No
HTTP_CAC_VARIABLE
No