| Attribute | Type | Description | Additional information |
| "CI_nCertType" | (paramInt) | certificate type | mandatory, see Certificate types |
| "CI_bFeatureActive" | (paramBool) | Is issuance feature active | mandatory, if absent then it will be defaulted to false. |
| "CI_bAutorenewalEnabled" | (paramBool) | If autorenewal enabled | optional, True if certificate auto-renewal feature enabled, default value is False |
| "CI_nRenewalPeriodSec" | (paramInt) | Certificate renewal period | optional, in seconds |
| "CI_bAutoIssuanceDisabled" | (paramBool) | Is certificate auto-issuance allowed | optional, False if certificate auto-issuance allowed, True if custom certificates allowed only, default value is False |
| "CI_wstrPkiCertTemplateName" | (paramString) | PKI certificate template name | optional |
| "CI_bEncryptionEnabled" | (paramBool) | Is certificate encryption feature enabled | optional, True if certificate encryption feature enabled |
| "CI_nEncryptionPwdLength" | (paramInt) | certificate password length for certificate encryption feature | optional, min=8, max=16 |
| "CI_nExpiryPeriod" | (paramInt) | Certificate expiry period | optional, in days |
| "CI_bAutoIssuanceKes" | (paramBool) | Is certificate auto-issuance for new KES device allowed | optional, True if certificate auto-issuance for new KES device allowed |
| "CI_bAutoIssuanceIos" | (paramBool) | Is certificate auto-issuance for new iOS MDM device allowed | optional, True if certificate auto-issuance for new iOS MDM device allowed |
| "CI_wstrAutoIssuanceKesTag" | (paramString) | Certificate tag for auto-issued certificate for KES device | optional |
| "CI_wstrAutoIssuanceIosTag" | (paramString) | Certificate tag for auto-issued certificate for iOS MDM device | optional |
| "CI_bAutoIssuanceOwnCA" | (paramBool) | Force using own CA if auto-issuance enabled | optional, True if using own CA |
