When issuing a new NSS Token, what must be added?

• A. Phone Home URL
• B. Revocation URL
• C. Certificate URL
• D. User URL

Answer: (A)

When issuing a new NSS Token, a back-channel URL that the token uses to contact the issuing service is required. This Phone Home URL acts as the management link, allowing the token to report status, receive policy updates, and respond to management actions such as revocation. Without this back-channel, the issuer cannot monitor or manage the token after issuance, which is why this URL must be added.

The other URLs serve different roles: Revocation URL points to where revocation information for certificates can be obtained, Certificate URL indicates where certificate resources are located, and User URL is typically a contact or resource related to the user. They describe other aspects of certificate handling but do not provide the essential remote management connection the token needs.