# Configuring Regular Expressions to Match a CA Certificate with a CommCell User

To allow users to access the Command Center using a Common Access Card (CAC), configure the Tomcat server on the Command Center computers and add the necessary additional settings.

## Procedure

1. Configure a regular expression pattern to divide the contents of the CA Certificate Subject field into a group of strings.

   For example, with the default regular expression `CN=(.*)[.]([0-9]{10}` you can split `CN=DAVE.OWEN.9875432101` into two string groups `DAVE.OWEN` and `9875432101`.

   1. Log on to the CommCell Console.

   2. To the CommCell environment, add the CACUserNameRegex additional setting as shown in the following table.

      For instructions about adding an additional setting from the CommCell Console, see Adding an Additional Settings from the CommCell Console.

      Property | Value
      --- | ---
      Name | CACUserNameRegex
      Category | CommServDB.GxGlobalParam
      Type | String
      Value | A pattern to divide the contents of the CA Certificate Subject field into group of strings. The default value is `CN=(.*)[.]([0-9]{10})`

2. Configure a regular expression pattern to extract the string groups created from the previous step and match it with an existing CommCell user.

   For example, with the default value `$2`, the second string group `9875432101` is extracted that can be used to match with the employee ID of an existing CommCell user.

   - Log on to the CommCell Console.

   - To the CommCell environment, add the CACUserNameoutputPattern additional setting as shown in the following table.

     For instructions about adding an additional setting from the CommCell Console, see Adding an Additional Settings from the CommCell Console.

Property | Value
--- | ---
Name | CACUserNameoutputPattern
Category | CommServDB.GxGlobalParam
Type | String
Value | A pattern to extract the username or employee ID of the user, from the CA certificate. The default value is `$2`

×

Loading...