XEDIA-PKI-MIB
68 objects
This module defines objects for management of Xedia's Public Key Infrastructure subsystem.
Imported Objects
| SNMPv2-CONF | MODULE-COMPLIANCE OBJECT-GROUP |
| SNMPv2-SMI | Gauge32 Integer32 MODULE-IDENTITY OBJECT-TYPE |
| SNMPv2-TC | DisplayString RowStatus TEXTUAL-CONVENTION TruthValue |
| XEDIA-REG | LongDisplayString xediaMibs |
| OID | Name | Access | Status | Description |
|---|---|---|---|---|
| 1.3.6.1.4.1.838.3.24 | IdentityxediaPkiMIB | This module defines objects for management of Xedia's Public Key Infrastructure subsystem. | ||
| 1.3.6.1.4.1.838.3.24.1 | NodepkiObjects | |||
| 1.3.6.1.4.1.838.3.24.1.1 | NodepkiSubsystemGroup | |||
| 1.3.6.1.4.1.838.3.24.1.1.1 | ScalarpkiSubjNameFormat | read-write | current | This object is used to specify the format of the subject name(s) for this system in PKI certificates and requests. There are multiple options for forming the s… |
| 1.3.6.1.4.1.838.3.24.1.1.2 | ScalarpkiSubjDistName | read-write | current | The X500 distinguished name for this system. This name corresponds to the subject name in this gateway's certificates and requests. For example: 'C=US, O=Xedia… |
| 1.3.6.1.4.1.838.3.24.1.1.3 | ScalarpkiLdapServer | read-write | current | The name of the LDAP Server used as the default Certificate and CRL repository. This may be in the form of a DNS or IP address with an optional port number spe… |
| 1.3.6.1.4.1.838.3.24.1.2 | TablepkiKeyPairTable | not-accessible | current | The PKI key pair table is used to administer public/private key pairs for this system. |
| 1.3.6.1.4.1.838.3.24.1.2.1 | RowpkiKeyPairEntry | not-accessible | current | The attributes of a single PKI Key Pair. Note that a PkiKeyPairEntry cannot be modified if referenced by a PkiCertRqstEntry. |
| 1.3.6.1.4.1.838.3.24.1.2.1.1 | ColumnpkiKeyPairName | not-accessible | current | The administrative name given to the key pair. |
| 1.3.6.1.4.1.838.3.24.1.2.1.2 | ColumnpkiKeyPairAlgorithm | read-create | current | The algorithm used to generate the key pair. |
| 1.3.6.1.4.1.838.3.24.1.2.1.3 | ColumnpkiKeyPairLength | read-create | current | The length of the public key in bits. For RSA keys, the valid range is 512 to 2048, and the default is 1024. For DSS keys, the valid range is 512 to 1024, and … |
| 1.3.6.1.4.1.838.3.24.1.2.1.4 | ColumnpkiKeyPairRowStatus | read-create | current | This object is used to create and delete entries in this table. |
| 1.3.6.1.4.1.838.3.24.1.3 | TablepkiCertRqstTable | not-accessible | current | The PKI key pair table is used to administer PKCS #10 certificate requests for this system. |
| 1.3.6.1.4.1.838.3.24.1.3.1 | RowpkiCertRqstEntry | not-accessible | current | The attributes of a single PKCS #10 certificate request. |
| 1.3.6.1.4.1.838.3.24.1.3.1.1 | ColumnpkiCertRqstPublicKey | not-accessible | current | The system's public key included in this certificate request. This object references an entry in the pkiKeyPairTable. |
| 1.3.6.1.4.1.838.3.24.1.3.1.2 | ColumnpkiCertRqstSigAlgorithm | read-create | current | The signature algorithm used to sign the public key information in this certificate request. For both RSA and DSA key pairs, the hash will default to SHA-1. |
| 1.3.6.1.4.1.838.3.24.1.3.1.3 | ColumnpkiCertRqstSignature | read-only | current | The signature of the certificate request. After the certificate request is tranported to the CA, many CAs display the certificate request signature and suggest… |
| 1.3.6.1.4.1.838.3.24.1.3.1.4 | ColumnpkiCertRqstPem | read-only | current | The full ANS.1 DER encoded PKCS #10 certificate request in PEM/base64 format. This object may be manually cut and pasted over to the certificate authority for … |
| 1.3.6.1.4.1.838.3.24.1.4 | ScalarpkiNewCert | read-write | current | X.509 Certificate generated by a Certificate Authority based on the pkiPublicKeyCertRequest information in base64/PEM format. This object provides a manual mec… |
| 1.3.6.1.4.1.838.3.24.1.5 | TablepkiCertTable | not-accessible | current | This table contains the certificates in the system's local database including static certificates loaded via network management and dynamic certificates retrie… |
| 1.3.6.1.4.1.838.3.24.1.5.1 | RowpkiCertEntry | not-accessible | current | The attributes that make up a single certificate. |
| 1.3.6.1.4.1.838.3.24.1.5.1.1 | ColumnpkiCertIndex | read-only | current | The unique index for this certificate. |
| 1.3.6.1.4.1.838.3.24.1.5.1.2 | ColumnpkiCertSubjNames | read-only | current | The subject name(s) of the network entity or user being certified. The certificate's subject name can consist of multiple names including distinguished name fi… |
| 1.3.6.1.4.1.838.3.24.1.5.1.3 | ColumnpkiCertIssuerNames | read-only | current | The name(s) of the certificate authority which issued this certificate. The certificate's issuer name can consist of multiple names including distinguished nam… |
| 1.3.6.1.4.1.838.3.24.1.5.1.4 | ColumnpkiCertKeyPair | read-only | current | This system's public/private keypair associated with this certificate. If the certificate is not for this gateway, the object will be a zero length string. |
| 1.3.6.1.4.1.838.3.24.1.5.1.5 | ColumnpkiCertType | read-only | current | The type of certificate. |
| 1.3.6.1.4.1.838.3.24.1.5.1.6 | ColumnpkiCertSerialNum | read-only | current | The serial number for this certificate. |
| 1.3.6.1.4.1.838.3.24.1.5.1.7 | ColumnpkiCertValidNotBefore | read-only | current | The start of the validity period for this certificate. |
| 1.3.6.1.4.1.838.3.24.1.5.1.8 | ColumnpkiCertValidNotAfter | read-only | current | The end of the validity period for this certificate. |
| 1.3.6.1.4.1.838.3.24.1.5.1.9 | ColumnpkiCertCreation | read-only | current | Specifies how the certificate was obtained. If a dynamic certificate is modified via network management, it becomes 'static'. |
| 1.3.6.1.4.1.838.3.24.1.5.1.10 | ColumnpkiCertCertAuthority | read-only | current | Indicates whether or not this certificate is for a Certificate Authority. |
| 1.3.6.1.4.1.838.3.24.1.5.1.11 | ColumnpkiCertCrlIssuer | read-write | current | Certificate Authorities periodically issue Certificate Revocation Lists (CRLs) for certificates which have been revoked. Certificates issued by a CA need to be… |
| 1.3.6.1.4.1.838.3.24.1.5.1.12 | ColumnpkiCertTrustStatus | read-only | current | The certificate's current trust status. If the trust computation succeeds, it will be 'trusted(0)' otherwise this object will give the set of errors detected w… |
| 1.3.6.1.4.1.838.3.24.1.5.1.13 | ColumnpkiCertForceTrusted | read-write | current | A mechanism whereby the administrator can set any certificate trusted. Enabling 'forceTrusted' will set the certificate trusted for it's entire validity period… |
| 1.3.6.1.4.1.838.3.24.1.5.1.14 | ColumnpkiCertSubjPubKeyAlgorithm | read-only | current | The subject's public key algorithm. |
| 1.3.6.1.4.1.838.3.24.1.5.1.15 | ColumnpkiCertSignatureAlgorithm | read-only | current | The algorithm used to sign the certificate. |
| 1.3.6.1.4.1.838.3.24.1.5.1.16 | ColumnpkiCertSignature | read-only | current | The certificate's digital signature. After loading a CA certificate, it is recommended that this value be checked against the CA certificate signature to verif… |
| 1.3.6.1.4.1.838.3.24.1.5.1.17 | ColumnpkiCertRemove | read-write | current | This object is used to delete certificates. |
| 1.3.6.1.4.1.838.3.24.1.6 | ScalarpkiNewCrl | read-write | current | X.509 Certificate Revocation list generated by a Certificate Authority in base64/PEM format. This object provides a manual mechanism for the administrator to l… |
| 1.3.6.1.4.1.838.3.24.1.7 | TablepkiCrlTable | not-accessible | current | This table contains the CRLs in the system's local database including static CRLs loaded via network management and dynamic CRLs retrieved from operational pro… |
| 1.3.6.1.4.1.838.3.24.1.7.1 | RowpkiCrlEntry | not-accessible | current | The attributes that make up a single CRL. |
| 1.3.6.1.4.1.838.3.24.1.7.1.1 | ColumnpkiCrlIndex | read-only | current | The unique index for this CRL. |
| 1.3.6.1.4.1.838.3.24.1.7.1.2 | ColumnpkiCrlIssuerNames | read-only | current | The name(s) of the certificate authority which issued this CRL. The CRL's issuer name can consist of multiple names including distinguished name fields, IP Add… |
| 1.3.6.1.4.1.838.3.24.1.7.1.3 | ColumnpkiCrlNumber | read-only | current | The CRL number which is unique for all CRLs issued by a particular CA. |
| 1.3.6.1.4.1.838.3.24.1.7.1.4 | ColumnpkiCrlType | read-only | current | The type of certificates in the CRL. |
| 1.3.6.1.4.1.838.3.24.1.7.1.5 | ColumnpkiCrlUpdateTime | read-only | current | The time when this CRL was updated. |
| 1.3.6.1.4.1.838.3.24.1.7.1.6 | ColumnpkiCrlNextUpdateTime | read-only | current | The time when this CRL will be updated next. |
| 1.3.6.1.4.1.838.3.24.1.7.1.7 | ColumnpkiCrlTrustStatus | read-only | current | The CRL's current trust status. If the trust computation succeeds, it will be 'trusted(0)' otherwise this object will give the set of errors detected while com… |
| 1.3.6.1.4.1.838.3.24.1.7.1.8 | ColumnpkiCrlCreation | read-only | current | Specifies how the CRL was obtained. If a dynamic CRL is modified via network management, it becomes 'static'. |
| 1.3.6.1.4.1.838.3.24.1.7.1.9 | ColumnpkiCrlRevokedCerts | read-only | current | The number of revoked certificates in this CRL. |
| 1.3.6.1.4.1.838.3.24.1.7.1.10 | ColumnpkiCrlRemove | read-write | current | This object is used to delete CRLs. |
| 1.3.6.1.4.1.838.3.24.1.8 | TablepkiCrlCertTable | not-accessible | current | This table contains the list of revoked certificates from CRLs in the pkiCrlTable. |
| 1.3.6.1.4.1.838.3.24.1.8.1 | RowpkiCrlCertEntry | not-accessible | current | A revoked certificate entry from a CRL. |
| 1.3.6.1.4.1.838.3.24.1.8.1.1 | ColumnpkiCrlCertIndex | read-only | current | The unique index for this CRL certificate. |
| 1.3.6.1.4.1.838.3.24.1.8.1.2 | ColumnpkiCrlCertSerialNumber | read-only | current | The serial number for the revoked certificate. |
| 1.3.6.1.4.1.838.3.24.1.8.1.3 | ColumnpkiCrlCertRevokedDate | read-only | current | The date and time at which the certificate was revoked. |
| 1.3.6.1.4.1.838.3.24.1.8.1.4 | ColumnpkiCrlCertInvalidDate | read-only | current | The date and time at which the certificate becomes invalid. |
| 1.3.6.1.4.1.838.3.24.1.8.1.5 | ColumnpkiCrlCertIssuerNames | read-only | current | The name(s) of the certificate authority which revoked the certificate. The certificate's issuer name can consist of multiple names including distinguished nam… |
| 1.3.6.1.4.1.838.3.24.2 | NodepkiConformance | |||
| 1.3.6.1.4.1.838.3.24.2.1 | NodepkiCompliances | |||
| 1.3.6.1.4.1.838.3.24.2.1.1 | CompliancepkiCompliance | current | The compliance statement for all agents that support this MIB. A compliant agent implements all objects defined in this MIB. | |
| 1.3.6.1.4.1.838.3.24.2.2 | NodepkiGroups | |||
| 1.3.6.1.4.1.838.3.24.2.2.1 | GrouppkiAllGroup | current | The set of all accessible objects in this MIB. |
Type Definitions
| Name | Syntax | Status | Description |
|---|---|---|---|
| PemString | DisplayString | current | An Privacy Enhanced Message formatted string. |
| PkiAlgorithm | INTEGER { rsa(1), dsa(2) } | current | A public key algorithm. |
| PkiCertType | INTEGER { x509-v1(1), x509-v2(2), x509-v3(3) } | current | A type of certificate. |
| PkiKeyPairName | DisplayString (SIZE (1..32)) | current | An administrative name for a key pair. |
| PkiSigAlgorithm | INTEGER { md5WithRSAEncryption(1), sha1WithRSAEncryption(2), sha1WithDSAId(3) } | current | A public key signature algorithm. |