IBM Tivoli and Cisco manual Nokeyrule, Value, Novaluerule, Pass

Parameter name	Parameter type	Description
NO_KEY_RULE	Operational	Used to determine the status of the registry key existence
		check if the registry key specified in KEY is not found. No
		more than one parameter value should be provided. If
		more than one parameter value is provided, only the first
		parameter value will be used. The parameter value
		provided should be one of the following: PASS, WARN, or
		FAIL. If the parameter value is set to either WARN or
		FAIL, then the KEY_WF workflow is used. The
		required_values attribute of the workflow will be set to the
		parameter value of the KEY parameter. If the parameter
		value is set to something other than PASS, WARN or
		FAIL errors may occur.
VALUE	Operational	Used to specify which registry value of the key indicated
		by the KEY parameter should be evaluated. No more
		than one parameter value should be specified. If a
		parameter is provided it will be used for the registry value
		existence check. If no parameter value is provided, the
		only check run is the registry key existence check for the
		key specified in the KEY parameter. If more than one
		parameter value is provided, only the first parameter
		value will be used.
NO_VALUE_RULE	Operational	Used to determine the status of the registry value
		existence check if the registry key specified in the KEY
		parameter is found, but the registry value specified in the
		VALUE parameter is not. No more than one parameter
		value should be provided, in which case only the first
		parameter value will be used. The parameter value
		provided should be one of the following: PASS, WARN, or
		FAIL. If the parameter value is set to either WARN or
		FAIL, then the VALUE_WF workflow is used. The
		required_values attribute of the workflow will be set to the
		parameter value of the VALUE parameter. The workflow
		will also have the attribute key set to the parameter value
		of the KEY parameter. If no parameter value is provided
		and the registry value specified by the VALUE parameter
		does not exist for the key specified by the KEY parameter,
		then the parameter value of the DEFAULT_RULE
		parameter is used. If the DEFAULT_RULE parameter is
		not set, the registry value existence check defaults to
		PASS.

172Building a Network Access Control Solution with IBM Tivoli and Cisco Systems