Adding assignment rules

Add an assignment rule

  1. Navigate to Discovery  Assignment Rules.

  2. Click the Add icon.

  3. Enter a name for the new rule.

  4. Add the required condition(s) to the rule.

    1. Click the Add Condition icon.

    2. Select the field to base the condition on.

      Field Description

      Common Name

      The Common Name attribute in the Subject field of the certificate is compared with the configured rule.

      Organization

      The Organization attribute in the Subject field of the certificate is compared with the configured rule.

      Organization Unit

      The Organization Unit attribute in the Subject field of the certificate is compared with the configured rule.

      City

      The City attribute in the Subject field of the certificate is compared with the configured rule.

      State

      The State attribute in the Subject field of the certificate is compared with the configured rule.

      Country

      The Country attribute in the Subject field of the certificate is compared with the configured rule.

      Subject Alt Name

      The Subject Alternative Name attribute in the Extensions field of the certificate is compared with the configured rule.

      Issuer

      The Issuer field of the certificate is compared with the configured rule.

      IP

      The IP address at the location where the certificate was discovered is compared with the configured rule.

      Port

      The Port at the location where the certificate was discovered is compared with the configured rule.

      Domain Component

      The Domain Component attribute in the Subject field of the certificate is compared with the configured rule.

      Template Name

      The MS AD Template Name attribute in the Extensions field of the certificate is compared with the configured rule.

      Key Usage

      The Key Usage attribute in the Extensions field of the certificate is compared with the configured rule.

      Extended Key Usage

      The Extended Key Usage attribute in the Extensions field of the certificate is compared with the configured rule.

      Host Name

      The Host Name at the location where the certificate was discovered is compared with the configured rule.

      Expiration

      The Not After field of the certificate is compared with the configured rule.

    3. Select an operator for the condition.

      The Regex operator supports the Java language variant.
    4. Enter a value for the condition.

    5. Repeat for additional conditions.

  5. Select which organization, and optional department, the rule should apply to.

  6. Select the certificate type the rule should apply to.

  7. Click Save.