Specify the intended application of the specified certificates (key usage). The WLC queries the certificates for the sub-CA only for the purpose indicated.
| Value | Meaning | 
|---|---|
| digitalSignature | |
| nonRepudiation | |
| keyEncipherment | |
| dataEncipherment | |
| keyAgreement | |
| keyCertSign | |
| cRLSign | |
| encipherOnly | |
| decipherOnly | |
| critical | By setting this restriction, the key usage extension must always be observed. If the extension is not supported, the certificate is rejected as invalid. | 
Sample input: digitalSignature, nonRepudiation
- SNMP ID:
 - 2.39.2.13.5
 - Console path:
 - Setup > Certificates > SCEP-CA > Sub-CA
 - Possible values:
 Comma separated list of the abbreviations listed above. Max. 100 characters from #[A-Z][a-z][0-9]@{|}~!$%&'()+-,/:;<=>?[\]^_. `
- Default:
 - empty