cpkiTrustPointEntry
CISCO-PKI-PARTICIPATION-MIB ·
.1.3.6.1.4.1.9.9.505.1.1.2.1
Object
row
The trustpoint configuration entry. This entry
specifies the trustpoint name, the associated key-pair
index, the identity certificate filename, some important
attributes in the identity certificate and the issuer
(CA) certificate filename and important attributes in the
issuer certificate.
The entry also specifies the certificate revocation
checking methods and OCSP URL configuration.
Context
- MIB
- CISCO-PKI-PARTICIPATION-MIB
- OID
.1.3.6.1.4.1.9.9.505.1.1.2.1- Type
- row
- Status
- current
- Parent
- cpkiTrustPointTable
- Table
- cpkiTrustPointTable
- Children
- 25
Syntax
No syntax metadata recorded.
Values & Constraints
No enumerated values or constraints recorded.
Related Objects
Child Objects
| Object | Type | Syntax | OID |
|---|---|---|---|
| cpkiTrustPointName The unique name or label of a trustpoint. | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.1 |
| cpkiIssuerCertFileName The name of the file storing the issuer certificate.
It is a unix style '/' seperated string representing
the absolute path of the file in the file system of
the device. If there … | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.10 |
| cpkiIssuerCertSubjectName The issuer name (subject name in issuer certificate
which will be the same as the issuer name in the
identity certificate if present).
If there is no certificate (a… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.11 |
| cpkiIssuerCertSerialNum The serial number of the issuer certificate.
If there is no certificate (as indicated by a zero
length string value of the object
cpkiIssuerCertFileName), the value… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.12 |
| cpkiIssuerCertStartDate The time when the issuer certificate starts to be
valid, corresponding to the notBefore field in the
certificate.
If there is no certificate (as indicated by a zero… | column | SNMPv2-TCDateAndTime | .1.3.6.1.4.1.9.9.505.1.1.2.1.13 |
| cpkiIssuerCertEndDate The time when the issuer certificate validity ends,
corresponding to the notAfter field on in the
certificate.
If there is no certificate (as indicated by a zero
le… | column | SNMPv2-TCDateAndTime | .1.3.6.1.4.1.9.9.505.1.1.2.1.14 |
| cpkiIssuerCertFingerPrint The MD5 fingerprint of the issuer's certificate in
HEX string format.
If there is no certificate (as indicated by a
zero length string value of cpkiIssuerCertFileNa… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.15 |
| cpkiRevokeCheckMethods Revocation checking methods list which is an ordered
list of certificate revocation checking methods to be
employed while verifying peer certificates issued by
the CA correspondin… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.16 |
| cpkiOCSPurl The contact http url of the external OCSP server for
certificate revocation checking using OCSP protocol.
The default value of this object (after row creation)
is … | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.17 |
| cpkiAction The PKI support action to be triggered for this
trustpoint entry.
The PKI support actions are steps in the certificate
work-flow used to facilitate the configuratio… | column | CiscoPkiAction | .1.3.6.1.4.1.9.9.505.1.1.2.1.18 |
| cpkiActionUrl The value of this object indicates the filename
containig the input or output certificate data needed
for the PKI support action being triggered on this entry.
The filename should… | column | SNMP-FRAMEWORK-MIBSnmpAdminString | .1.3.6.1.4.1.9.9.505.1.1.2.1.19 |
| cpkiTrustPointId A unique identification number of the trustpoint.
This is included to support ordered lists of trustpoints
when needed. One such scenario where such ordered list
may be needed is … | column | SNMPv2-SMIUnsigned32 | .1.3.6.1.4.1.9.9.505.1.1.2.1.2 |
| cpkiActionPassword The value of this object indicates the password
required to perform the PKI support action being
triggered. This password is required to be
specified only for 'certreq', 'importpk… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.20 |
| cpkiLastAction The PKI support action attempted last. In otherwords,
the value attempted to be set for cpkiAction object
last. If no action has been triggered for the trustpoint
after its creati… | column | CiscoPkiAction | .1.3.6.1.4.1.9.9.505.1.1.2.1.21 |
| cpkiLastActionResult The result of the execution of the last PKI support
action (represented by the value of cpkiLastAction).
When the value of this object is 'inProgress', an
attempt to set the value… | column | CiscoPkiActionResult | .1.3.6.1.4.1.9.9.505.1.1.2.1.22 |
| cpkiLastActionFailureReason The failure reason description for the failed
execution of PKI support action. If the object
cpkiActionResult has the value 'failed', then
this object contains the reason string a… | column | SNMP-FRAMEWORK-MIBSnmpAdminString | .1.3.6.1.4.1.9.9.505.1.1.2.1.23 |
| cpkiTrustPointStorageType The storage type for this conceptual row. | column | SNMPv2-TCStorageType | .1.3.6.1.4.1.9.9.505.1.1.2.1.24 |
| cpkiTrustPointConfigRowStatus The conceptual row status of the trustpoint entry.
After row creation, the value of this object will
become active(1) as there is no prerequisite of certain
objects… | column | SNMPv2-TCRowStatus | .1.3.6.1.4.1.9.9.505.1.1.2.1.25 |
| cpkiKeyPairName The name of the associated key-pair from a key-pair
table. If a key-pair is not yet associated, the value
of this object will be a zero length string.
If a key-pair… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.3 |
| cpkiIdCertFileName The name of the file storing the identity
certificate. It is a unix style '/' seperated string
representing the absolute path of the file in the
file system of the device. If ther… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.4 |
| cpkiIdCertSubjectName The subject name of the identity certificate.
If there is no certificate (as indicated by a zero
length string value of the object cpkiIdCertFileName)
or no subject name in the ce… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.5 |
| cpkiIdCertSerialNum The serial number of the identity certificate.
If there is no certificate (as indicated by a zero
length string value of the object cpkiIdCertFileName),
the value of this object… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.6 |
| cpkiIdCertStartDate The time when the identity certificate starts to be
valid, corresponding to the notBefore field in the
certificate.
If there is no certificate (as indicated by a z… | column | SNMPv2-TCDateAndTime | .1.3.6.1.4.1.9.9.505.1.1.2.1.7 |
| cpkiIdCertEndDate The time when the identity certificate validity ends,
corresponding to the notAfter field in the
certificate.
If there is no certificate (as indicated by the zero
… | column | SNMPv2-TCDateAndTime | .1.3.6.1.4.1.9.9.505.1.1.2.1.8 |
| cpkiIdCertFingerPrint The MD5 fingerprint of the identity certificate in
HEX string format.
If there is no certificate (as indicated by a zero
length string value of the object cpkiIdCer… | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.9 |
Indexes
| Object | Type | Syntax | OID |
|---|---|---|---|
| cpkiTrustPointName The unique name or label of a trustpoint. | column | OctetString | .1.3.6.1.4.1.9.9.505.1.1.2.1.1 |