Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Network Node Manager i Software10.30

Administer > Configure NNMi to Support Public Key Infrastructure User Authentication > Configuring NNMi to Restrict Certificates Used for NNMi Log On Access

Configuring NNMi to Restrict Certificates Used for NNMi Logon Access

If you are using NNMi with PKI user authentication, you might want to restrict which certificates are considered valid for NNMi logon access.

NNMi supports the following types of restrictions:

Restrictions on the certificate extended key usage, which can be used to restrict NNMi access to hardware-based certificates or other specific certificates.
Restrictions on the certificate issuer. These restrictions are intended to prevent a trusted certificate, which is loaded for purposes other than log on purposes, from being used to create log on certificates.

To configure NNMi to restrict certificates used for log on access, do the following:

Edit the following file:

Windows: %NnmDataDir%\nmsas\NNM\conf\nms-auth-config.xml

Linux: $NnmDataDir/nmsas/NNM/conf/nms-auth-config.xml
Locate the text block containing the following:
```
<certificateConstraints>
```
Use the following examples as a guide to configure NNMi to restrict certificates used for logons (replace values as appropriate):

Example 1: To require client authentication, edit the following section:



<extKeyUsage>1.3.6.1.5.5.7.3.2</extKeyUsage>

Example 2: To require users to log on using a Microsoft smart card:



<extKeyUsage>1.3.6.1.4.1.311.20.2.2</extKeyUsage>

Example 3: To accept only certificates signed by a particular CA:



<trustedIssuer>CN=MyIssuer, OU=MyOrgUnit, O=MyOrg, ST=CO, C=US</trustedIssuer>

Note When multiple extKeyUsage entries are specified, the certificate must contain all of them (Boolean AND). When multiple trustIssuer entries are specified, only one must be the certificate trust issuer (Boolean OR).
Run the following command for the change to take effect:
```
nnmsecurity.ovpl -reloadAuthConfig
```