| Attribute | Type | Description | Additional information |
| "CI_nCertType" | (paramInt) | certificate type | mandatory, see Certificate types |
| "CI_bFeatureActive" | (paramBool) | Is issuance feature active | mandatory |
| "CI_bAutorenewalEnabled" | (paramBool) | If autorenewal enabled | mandatory |
| "CI_nRenewalPeriodSec" | (paramInt) | Certificate renewal period | mandatory, in seconds |
| "CI_bAutoIssuanceDisabled" | (paramBool) | Is certificate auto-issuance allowed | mandatory |
| "CI_wstrPkiCertTemplateName" | (paramString) | PKI certificate template name | optional |
| "CI_bEncryptionEnabled" | (paramBool) | Is certificate encryption feature enabled | mandatory |
| "CI_nEncryptionPwdLength" | (paramInt) | certificate password length for certificate encryption feature | mandatory |
| "CI_nExpiryPeriod" | (paramInt) | Certificate expiry period | mandatory, in days |
| "CI_bAutoIssuanceKes" | (paramBool) | Is certificate auto-issuance for new KES device allowed | optional, True if certificate auto-issuance for new KES device allowed |
| "CI_bAutoIssuanceIos" | (paramBool) | Is certificate auto-issuance for new iOS MDM device allowed | optional, True if certificate auto-issuance for new iOS MDM device allowed |
| "CI_wstrAutoIssuanceKesTag" | (paramString) | Certificate tag for auto-issued certificate for KES device | optional |
| "CI_wstrAutoIssuanceIosTag" | (paramString) | Certificate tag for auto-issued certificate for iOS MDM device | optional |
| "CI_bAutoIssuanceOwnCA" | (paramBool) | Force using own CA if auto-issuance enabled | optional, True if using own CA |
