Name | Data Type | Value |
Description | string | This method is called to request a Certificate Signing Request (CSR) based on the Distinguished Name provided through Subject parameter. The CSR utilizes PKCS#10 structure as defined in RFC2986. If the Subject parameter is not NULL the following numbered requirements shall apply: 1) The Subject parameter shall follow the format specified by RFC 1485, 2) the PublicKeyAlgorithm shall specify the algorithm to be used for the public key, 3) the PublicKeySize shall specify the length for the public key in bits. If the Subject parameter is NULL the following numbered requirements shall apply: 1) the PublicKeyAlgorithm shall be NULL, 2) the PublicKeySize shall be NULL, 3) the PublicPrivateKeyPair shall reference an instance of CIM_UnsignedCredential representing the public/ private key pair to be used for the CSR. The OutputFormat parameter shall specify the output format of the CSR. If the OutputFormat parameter is NULL, the implementation shall format the Certificate Signing Request in the PEM format, otherwise the format shall be the format specified by the OutputFormat parameter. Upon the successful execution, the CSR output parameter shall contain the CSR in PKCS#10 structure. |
ValueMap | string | 0, 1, 2, 3, 4, 5, 6, 7..32767, 32768..65535 |
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Vendor Specified |
Name | Type | Qualifiers |
Name | Data Type | Value |
ExtendedKeyUsage | string |
Description | string | The ExtendedKeyUsage indicates one or more purposes for which the certified public key may be used. |
IN | boolean | true |
OutputFormat | uint16 |
Description | string | The OutputFormat property represents the requested format of the Certificate Signing Request. |
IN | boolean | true |
ValueMap | string | 2, 3, .., 32768..65535 |
Values | string | PEM, DER, DMTF Rserved, Vendor Reserved |
PublicKeyAlgorithm | uint16 |
Description | string | The PublicKeyAlgorithm specifies the algorithm to be used for the public key. |
IN | boolean | true |
ValueMap | string | 2, 3, .., 32768..65535 |
Values | string | RSA, DSA, DMTF Rserved, Vendor Reserved |
PublicKeySize | uint16 |
Description | string | The PublicKeySize shall specify the length for the public key in bits. |
IN | boolean | true |
PUNIT | string | bit |
Subject | string |
Description | string | The Subject shall follow the format specified by RFC 1485. An example of the value of the Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, L=Santa Clara, ST=California, C=US" |
IN | boolean | true |
CSR | uint8[] |
Description | string | The CSR parameter is an output parameter that upon successful exection of this method will contain the formated Certificate Signing Request. |
IN | boolean | false |
OUT | boolean | true |
Required | boolean | true |
PublicPrivateKeyPair |
REF
CIM_UnsignedCredential |
Description | string | The PublicPrivateKeyPair parameter specifies a reference to an instance of CIM_UnsignedCredential which represents a public private key pair to be utilized by the CSR. |
IN | boolean | true |
Name | Data Type | Value |
Description | string | This method is called to generate to generate a self-signed certificate. If the Subject parameter is not NULL the following numbered requirements shall apply: 1) The Subject parameter shall follow the format specified by RFC 1485, 2) the PublicKeyAlgorithm shall specify the algorithm to be used for the public key, 3) the PublicKeySize shall specify the length for the public key in bits. If the Subject parameter is NULL the following numbered requirements shall apply: 1) the PublicKeyAlgorithm shall be NULL, 2) the PublicKeySize shall be NULL, 3) the PublicPrivateKeyPair shall reference an instance of CIM_UnsignedCredential representing the public/ private key pair to be used for the self signed certificate. Upon successful execution the reference to the newly created instance of CIM_X509Certificate shall be returned in the NewCertificate parameter which represents the self-signed certificate with the public/private key pair of the size specified by the KeySize parameter. This instance shall be associated to the instance of CIM_Keystore referenced by the Keystore parameter through CIM_MemberOfCollection association. If the CredentialContext parameter is not NULL, the newly created instance shall be associated with the instance of CIM_ManagedElement referenced by the CredentialContext parameter through CIM_CredentialContext association. If the CredentialContext parameter is NULL, the newly created instance shall not be associated with the instance of CIM_ManagedElement through CIM_CredentialContext association. |
ValueMap | string | 0, 1, 2, 3, 4, 5, 6, 7..32767, 32768..65535 |
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Vendor Specified |
Name | Type | Qualifiers |
Name | Data Type | Value |
PublicKeyAlgorithm | uint16 |
Description | string | The PublicKeyAlgorithm specifies the algorithm to be used for the public key. |
IN | boolean | true |
ValueMap | string | 2, 3, .., 32768..65535 |
Values | string | RSA, DSA, DMTF Rserved, Vendor Reserved |
PublicKeySize | uint16 |
Description | string | The PublicKeySize shall specify the length for the public key in bits. The value shall be of power of 2. |
IN | boolean | true |
PUNIT | string | bit |
Subject | string |
Description | string | The Subject shall follow the format specified by RFC 1485. An example of the value of Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, L=Santa Clara, ST=California, C=US" |
IN | boolean | true |
CredentialContext |
REF
CIM_ManagedElement |
Description | string | The managed element that represents the service or the managed element that will either verify the certificate(s) or present the certificate(s) for the verification. |
IN | boolean | true |
Keystore |
REF
CIM_Keystore |
Description | string | The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the new certificate will be added. |
IN | boolean | true |
Required | boolean | true |
PublicPrivateKeyPair |
REF
CIM_UnsignedCredential |
Description | string | The PublicPrivateKeyPair parameter specifies a reference to an instance of CIM_UnsignedCredential which represents a public private key pair to be utilized by the newly created selef signed certificate. |
IN | boolean | true |
SelfSignedCertificate |
REF
CIM_X509Certificate |
Description | string | Reference to the newly created instance of CIM_X509Certificate representing the self signed certificate. |
IN | boolean | false |
OUT | boolean | true |
Name | Data Type | Value |
Description | string | This method is called to import a certificate or a certificate chain using the certificate's encoded representation. Upon successful execution the array of references to the instance(s) of CIM_X509Certificate representing the imported certificate or certificate chain shall be returned inside the NewCertificates output parameter. The newly created instance(s) of CIM_X509Certificate shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. If the CredentialContext parameter is not NULL, the newly created instance(s) of the CIM_X509Certificate shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association. If the CredentialContext parameter is NULL, the newly created instance(s) of the CIM_X509Certificate shall not be associated to the insatnces of CIM_ManagedElement through the CIM_CredentialContext association. |
ValueMap | string | 0, 1, 2, 3, 4, 5, 6, 7..32767, 32768..65535 |
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Vendor Specified |
Name | Type | Qualifiers |
Name | Data Type | Value |
Format | uint16 |
Description | string | The Format shall specify the format for the encoding that is used by octet string EncodedCertificates parameter. |
IN | boolean | true |
Required | boolean | true |
ValueMap | string | 2, 3, 4, 5, .., 32768..65535 |
Values | string | DER, PEM, PKCS7, PKCS12, DMTF Rserved, Vendor Reserved |
EncodedCertificates | uint8[] |
Description | string | An array of unsigned integers representing octet string of an encoded certificate or certificate chain to be imported. |
IN | boolean | true |
OctetString | boolean | true |
Required | boolean | true |
NewCertificates | CIM_X509Certificate[] |
Description | string | Reference to the newly created instance of CIM_X509Certificate representing the imported certificate or certificate chain. |
IN | boolean | false |
OUT | boolean | true |
Required | boolean | true |
CredentialContext |
REF
CIM_ManagedElement |
Description | string | The managed element that represents the service or the managed element that will either verify the certificate(s) or present the certificate(s) for the verification. |
IN | boolean | true |
Keystore |
REF
CIM_Keystore |
Description | string | The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the new certificate or certificate chain will be added. |
IN | boolean | true |
Required | boolean | true |
Name | Data Type | Value |
Description | string | This method is called to import a certificate or a certificate chain using an array of embedded instance of CIM_X509Certificate. Upon successful execution the array of references to the instance(s) of CIM_X509Certificate representing the imported certificate or certificate chain shall be returned by the NewCertificates output parameter. The newly created instance(s) of CIM_X509Certificate shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. If the CredentialContext parameter is not NULL, the newly created instance(s) of the CIM_X509Certificate shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association.If the CredentialContext parameter is NULL, the newly created instance(s) of the CIM_X509Certificate shall not be associated to the insatnces of CIM_ManagedElement through the CIM_CredentialContext association. |
ValueMap | string | 0, 1, 2, 3, 4, 5, 6, 7..32767, 32768..65535 |
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Vendor Specified |
Name | Data Type | Value |
Description | string | This method is called to export a certificate or a certificate chain using the certificate's encoded representation. Upon successful execution the array of unsigned integers representing octet string of the exported certificate or certificate chain shall be returned inside the EncodedCertificates output parameter based on the encoding specified in the EncodingFormat parameter. |
ValueMap | string | 0, 1, 2, 3, 4, 5, 6, 7..32767, 32768..65535 |
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Vendor Specified |
Name | Type | Qualifiers |
Name | Data Type | Value |
Format | uint16 |
Description | string | The Format parameter specifies the format of the octet string EncodedCertificates parameter. |
IN | boolean | true |
Required | boolean | true |
ValueMap | string | 2, 3, 4, 5, .., 32768..65535 |
Values | string | DER, Base64, PKCS7, PKCS12, DMTF Rserved, Vendor Reserved |
EncodedCertificates | uint8[] |
Description | string | An array of unsigned integers representing octet string of an exported encoded certificate or certificate chain. |
IN | boolean | false |
OctetString | boolean | true |
OUT | boolean | true |
Required | boolean | true |
CertificatesToExport | CIM_X509Certificate[] |
Description | string | Reference to the instance of CIM_SignedCredential representing the certificate or certificate chain to be exported. |
IN | boolean | true |
Required | boolean | true |
Name | Data Type | Value |
Description | string | This method is called to apply Certificate Revocation List (CRL) to a particular key store. Upon successful execution the array of references to the instance(s) of CIM_X509CRL representing the applied CRL shall be returned inside the AppliedCRL output parameter. The newly created instance(s) of CIM_X509CRL shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. The newly created instance(s) of the CIM_X509CRL shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association. |
ValueMap | string | 0, 1, 2, 3, 4, 5, 6, 7..32767, 32768..65535 |
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Vendor Specified |
Name | Type | Qualifiers |
Name | Data Type | Value |
Format | uint16 |
Description | string | The Format shall specify the format for the encoding that is used by octet string EncodedCRL parameter. |
IN | boolean | true |
Required | boolean | true |
ValueMap | string | 2, 3, 4, 5, .., 32768..65535 |
Values | string | DER, PEM, PKCS7, PKCS12, DMTF Rserved, Vendor Reserved |
EncodedCRL | uint8[] |
Description | string | An array of unsigned integers representing octet string of an encoded CRL to be applied. |
IN | boolean | true |
OctetString | boolean | true |
Required | boolean | true |
NewCertificates | CIM_X509CRL[] |
Description | string | Reference to the newly created instance of CIM_X509CRL representing the applied CRL. |
IN | boolean | false |
OUT | boolean | true |
Required | boolean | true |
CredentialContext |
REF
CIM_ManagedElement |
Description | string | The managed element that represents the service or the managed element for which the certificates were revoked by the application of the CRL. |
IN | boolean | true |
Required | boolean | true |
Keystore |
REF
CIM_Keystore |
Description | string | The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the CRL will be applied. |
IN | boolean | true |
Required | boolean | true |