Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Network Node Manager i Software10.30

Administer > Configure NNMi to Support Public Key Infrastructure User Authentication > Certificate Validation (CRL and OCSP) > General Configuration for Certificate Validation Protocols

General Configuration for Certificate Validation Protocols

You can configure how NNMi checks for revoked certificates. For example, you can configure the order in which protocols are used, and whether all the protocols are used.

NNMi uses the nms-auth-config.xml file to configure such settings.

Configuring Protocol Order

By default, NNMi performs CRL checking, and then OCSP checking.

To configure the order in which the certificate validation protocols check for revoked certificates, do the following:

Edit the following file:

Windows: %NnmDataDir%\nmsas\NNM\conf\nms-auth-config.xml

Linux:$NnmDataDir/nmsas/NNM/conf/nms-auth-config.xml
Within the <revocation> section of the file (find the <revocation> tag), search for the line that begins with the following text:
```
<ordering>
```
Do one of the following:
- To specify that CRL checking is to be used first, followed by OCSP, edit the line to read as follows:
```
<ordering>CRL OCSP</ordering>
```
- To specify that OCSP checking is to be used first, followed by CRL, edit the line to read as follows:
```
<ordering>OCSP CRL</ordering>
```
Save the nms-auth-config.xml file.
Run the following command for the change to take effect:
```
nnmsecurity.ovpl -reloadAuthConfig
```

Configuring Protocol Requests

You can configure NNMi to do either of the following with regard to protocol requests:

Check all certificate validation protocols for each certificate
Check the protocol list in the preferred order and stop when a valid response is received

To configure protocol requests, do the following:

Edit the following file:

Windows: %NnmDataDir%\nmsas\NNM\conf\nms-auth-config.xml

Linux: $NnmDataDir/nmsas/NNM/conf/nms-auth-config.xml
Within the <revocation> section of the file (find the <revocation> tag), search for the line that begins with the following text:
```
<mode>
```
Do one of the following:
- To have NNMi check all protocols for each certificate, edit the line to read as follows:
```
<mode>CHECK_ALL</mode>
```
- To have NNMi check the protocol list in the preferred order and stop when a valid response is received, edit the line to read as follows:
```
<mode>FIRST_SUCCESS</mode>
```
Save the nms-auth-config.xml file.
Run the following command for the change to take effect:
```
nnmsecurity.ovpl -reloadAuthConfig
```

Send Help Center feedback