Managing assignment rules

Edit an assignment rule

  1. Navigate to Discovery  Assignment Rules.

  2. Select the assignment rule you want to edit, and click the Edit icon.

  3. Add or update condition(s) as required.

    1. Locate the condition to be updated, or click the Add Condition icon to add a new one.

    2. Select the field to base the condition on.

      Field Description

      Common Name

      The Common Name attribute in the Subject field of the certificate is compared with the configured rule.

      Organization

      The Organization attribute in the Subject field of the certificate is compared with the configured rule.

      Organization Unit

      The Organization Unit attribute in the Subject field of the certificate is compared with the configured rule.

      City

      The City attribute in the Subject field of the certificate is compared with the configured rule.

      State

      The State attribute in the Subject field of the certificate is compared with the configured rule.

      Country

      The Country attribute in the Subject field of the certificate is compared with the configured rule.

      Subject Alt Name

      The Subject Alternative Name attribute in the Extensions field of the certificate is compared with the configured rule.

      Issuer

      The Issuer field of the certificate is compared with the configured rule.

      IP

      The IP address at the location where the certificate was discovered is compared with the configured rule.

      Port

      The Port at the location where the certificate was discovered is compared with the configured rule.

      Domain Component

      The Domain Component attribute in the Subject field of the certificate is compared with the configured rule.

      Template Name

      The MS AD Template Name attribute in the Extensions field of the certificate is compared with the configured rule.

      Key Usage

      The Key Usage attribute in the Extensions field of the certificate is compared with the configured rule.

      Extended Key Usage

      The Extended Key Usage attribute in the Extensions field of the certificate is compared with the configured rule.

      Host Name

      The Host Name at the location where the certificate was discovered is compared with the configured rule.

      Expiration

      The Not After field of the certificate is compared with the configured rule.

    3. Select an operator for the condition.

      The Regex operator supports the Java language variant.
    4. Enter a value for the condition.

    5. Repeat for additional conditions.

      Click the Delete icon next to a condition to remove it, or click Remove All to remove all conditions. There must be at least one condition assigned.
  4. Select which organization, and optional department, the rule should apply to.

  5. Select the certificate type the rule should apply to.

  6. Click Save.

Delete an assignment rule

  1. Navigate to Discovery  Assignment Rules.

  2. Select the assignment you want to delete, and click the Delete icon.

  3. Click Delete.