In non-renewal cases, Dogtag usually expects a client to specify an enrollment profile to use.

A profile is a named group of configuration on the Dogtag server which includes which authentication requirements are made of the client submitting the request, how the request is approved (automatically, manually, etc.) and all of what, other than the submitter's public key, makes up the issued certificate.

This is somewhat analogous to what Active Directory Certificate Services calls "certificate templates."

We'll need to make configurable a default value to supply in case the command which added the request doesn't require one.