1-- *****************************************************************
2-- CISCO-PKI-MIB.my Cisco PKI MIB
3--
4-- Copyright (c) 1994-2000, 2014 by cisco Systems, Inc.
5-- All rights reserved.
6--
7-- *****************************************************************
8
9CISCO-PKI-MIB DEFINITIONS ::= BEGIN
10
11IMPORTS
12    MODULE-IDENTITY,
13    OBJECT-TYPE,
14    Counter32,
15    NOTIFICATION-TYPE,
16    Integer32,
17    Unsigned32
18        FROM SNMPv2-SMI
19    MODULE-COMPLIANCE,
20    NOTIFICATION-GROUP,
21    OBJECT-GROUP
22        FROM SNMPv2-CONF
23    DisplayString,
24    TimeInterval
25        FROM SNMPv2-TC
26    ciscoMgmt
27        FROM CISCO-SMI;
28
29
30ciscoPkiMIB MODULE-IDENTITY
31    LAST-UPDATED    "201410160000Z"
32    ORGANIZATION    "Cisco Systems, Inc."
33    CONTACT-INFO
34            "Cisco Systems
35            Customer Service
36
37            Postal: 170 W Tasman Drive
38            San Jose, CA  95134
39            USA
40
41            Tel: +1 800 553-NETS
42
43            E-mail: cs-<list>@cisco.com"
44    DESCRIPTION
45        "description"
46    REVISION        "201410150000Z"
47    DESCRIPTION
48        "Latest version of this MIB module."
49    ::= { ciscoMgmt 854 }
50
51
52-- Textual Conventions definition will be defined before this line
53
54ciscoPkiMIBNotifs  OBJECT IDENTIFIER
55    ::= { ciscoPkiMIB 1 }
56
57ciscoPkiMIBObjects  OBJECT IDENTIFIER
58    ::= { ciscoPkiMIB 2 }
59
60ciscoPkiMIBConform  OBJECT IDENTIFIER
61    ::= { ciscoPkiMIB 3 }
62
63
64ciscoPkiConfiguration  OBJECT IDENTIFIER
65    ::= { ciscoPkiMIBObjects 1 }
66
67ciscoPkiCertificates  OBJECT IDENTIFIER
68    ::= { ciscoPkiMIBObjects 2 }
69
70ciscoPkiRevocationInfo  OBJECT IDENTIFIER
71    ::= { ciscoPkiMIBObjects 3 }
72
73ciscoPkiEnrollmentProfile  OBJECT IDENTIFIER
74    ::= { ciscoPkiConfiguration 1 }
75
76ciscoPkiTrustpoints  OBJECT IDENTIFIER
77    ::= { ciscoPkiConfiguration 2 }
78
79
80certChainTable OBJECT-TYPE
81    SYNTAX          SEQUENCE OF CertChainEntry
82    MAX-ACCESS      not-accessible
83    STATUS          current
84    DESCRIPTION
85        "Please enter the Table Description here."
86    ::= { ciscoPkiCertificates 1 }
87
88certChainEntry OBJECT-TYPE
89    SYNTAX          CertChainEntry
90    MAX-ACCESS      not-accessible
91    STATUS          current
92    DESCRIPTION
93        "An entry (conceptual row) in the xxxTable."
94    INDEX           { certChainLabel }
95    ::= { certChainTable 1 }
96
97CertChainEntry ::= SEQUENCE {
98        certChainLabel DisplayString,
99        certSerialNum  DisplayString,
100        certIssuerName DisplayString,
101        certStartDate  DisplayString,
102        certEndDate    DisplayString,
103        certRemainingLife DisplayString,
104        certType       DisplayString,
105        certTpLabel    DisplayString,
106        certSubName    DisplayString
107}
108
109certChainLabel OBJECT-TYPE
110    SYNTAX          DisplayString
111    MAX-ACCESS      not-accessible
112    STATUS          current
113    DESCRIPTION
114        "Please enter the object description here"
115    ::= { certChainEntry 1 }
116
117certSerialNum OBJECT-TYPE
118    SYNTAX          DisplayString
119    MAX-ACCESS      read-only
120    STATUS          current
121    DESCRIPTION
122        "Please enter the object description here"
123    ::= { certChainEntry 2 }
124
125certIssuerName OBJECT-TYPE
126    SYNTAX          DisplayString
127    MAX-ACCESS      read-only
128    STATUS          current
129    DESCRIPTION
130        "Please enter the object description here"
131    ::= { certChainEntry 3 }
132
133certStartDate OBJECT-TYPE
134    SYNTAX          DisplayString
135    MAX-ACCESS      read-only
136    STATUS          current
137    DESCRIPTION
138        "Please enter the object description here"
139    ::= { certChainEntry 4 }
140
141certEndDate OBJECT-TYPE
142    SYNTAX          DisplayString
143    MAX-ACCESS      read-only
144    STATUS          current
145    DESCRIPTION
146        "Please enter the object description here"
147    ::= { certChainEntry 5 }
148
149certType OBJECT-TYPE
150    SYNTAX          DisplayString
151    MAX-ACCESS      read-only
152    STATUS          current
153    DESCRIPTION
154        "Please enter the object description here"
155    ::= { certChainEntry 6 }
156
157certRemainingLife OBJECT-TYPE
158    SYNTAX          DisplayString
159    MAX-ACCESS      accessible-for-notify
160    STATUS          current
161    DESCRIPTION
162        "Please enter the object description here"
163    ::= { certChainEntry 7 }
164
165certTpLabel OBJECT-TYPE
166    SYNTAX          DisplayString
167    MAX-ACCESS      read-only
168    STATUS          current
169    DESCRIPTION
170        "Please enter the object description here"
171    ::= { certChainEntry 8 }
172
173certSubName OBJECT-TYPE
174    SYNTAX          DisplayString
175    MAX-ACCESS      read-only
176    STATUS          current
177    DESCRIPTION
178        "Please enter the object description here"
179    ::= { certChainEntry 9 }
180
181ciscoPkiCRLInfo  OBJECT IDENTIFIER
182    ::= { ciscoPkiRevocationInfo 1 }
183
184ciscoPkiOSCPInfo  OBJECT IDENTIFIER
185    ::= { ciscoPkiRevocationInfo 2 }
186
187
188pkiCRLTable OBJECT-TYPE
189    SYNTAX          SEQUENCE OF PkiCRLEntry
190    MAX-ACCESS      not-accessible
191    STATUS          current
192    DESCRIPTION
193        "Please enter the Table Description here."
194    ::= { ciscoPkiCRLInfo 1 }
195
196pkiCRLEntry OBJECT-TYPE
197    SYNTAX          PkiCRLEntry
198    MAX-ACCESS      not-accessible
199    STATUS          current
200    DESCRIPTION
201        "An entry (conceptual row) in the xxxTable."
202    INDEX           { crlTpLabel }
203    ::= { pkiCRLTable 1 }
204
205PkiCRLEntry ::= SEQUENCE {
206        crlTpLabel   DisplayString,
207        issuerName   DisplayString,
208        sequenceNumb DisplayString,
209        nextUpdate   DisplayString,
210        crlSize      Unsigned32,
211        deltaCRLFlag Unsigned32
212}
213
214crlTpLabel OBJECT-TYPE
215    SYNTAX          DisplayString
216    MAX-ACCESS      not-accessible
217    STATUS          current
218    DESCRIPTION
219        "Unique trustpoint Label"
220    ::= { pkiCRLEntry 1 }
221
222issuerName OBJECT-TYPE
223    SYNTAX          DisplayString (SIZE  (0..255))
224    MAX-ACCESS      read-only
225    STATUS          current
226    DESCRIPTION
227        "CRL Issuer name"
228    ::= { pkiCRLEntry 2 }
229
230sequenceNumb OBJECT-TYPE
231    SYNTAX          DisplayString (SIZE  (0..255))
232    MAX-ACCESS      read-only
233    STATUS          current
234    DESCRIPTION
235        "Please enter the object description here"
236    ::= { pkiCRLEntry 3 }
237
238nextUpdate OBJECT-TYPE
239    SYNTAX          DisplayString (SIZE  (0..255))
240    MAX-ACCESS      read-only
241    STATUS          current
242    DESCRIPTION
243        "Please enter the object description here"
244    ::= { pkiCRLEntry 4 }
245
246crlSize OBJECT-TYPE
247    SYNTAX          Unsigned32 (0..4294967294)
248    MAX-ACCESS      read-only
249    STATUS          current
250    DESCRIPTION
251        "Please enter the object description here"
252    DEFVAL          { 0 }
253    ::= { pkiCRLEntry 5 }
254
255deltaCRLFlag OBJECT-TYPE
256    SYNTAX          Unsigned32
257    MAX-ACCESS      read-only
258    STATUS          current
259    DESCRIPTION
260        "This object specifies the storage type for this conceptual row.
261        The following columnar objects are allowed to be writable
262        when the storageType of this conceptual row is permanent(4):
263        (replace with list of columns)"
264    DEFVAL          { 0 }
265    ::= { pkiCRLEntry 6 }
266
267
268pkiOCSPTable OBJECT-TYPE
269    SYNTAX          SEQUENCE OF PkiOCSPEntry
270    MAX-ACCESS      not-accessible
271    STATUS          current
272    DESCRIPTION
273        "Please enter the Table Description here."
274    ::= { ciscoPkiOSCPInfo 1 }
275
276pkiOCSPEntry OBJECT-TYPE
277    SYNTAX          PkiOCSPEntry
278    MAX-ACCESS      not-accessible
279    STATUS          current
280    DESCRIPTION
281        "An entry (conceptual row) in the xxxTable."
282    INDEX           { ocspTpLabel }
283    ::= { pkiOCSPTable 1 }
284
285PkiOCSPEntry ::= SEQUENCE {
286        ocspTpLabel DisplayString,
287        responderID DisplayString,
288        thisUpdate  DisplayString,
289        nexUpdate   DisplayString
290}
291
292ocspTpLabel OBJECT-TYPE
293    SYNTAX          DisplayString (SIZE  (0..255))
294    MAX-ACCESS      not-accessible
295    STATUS          current
296    DESCRIPTION
297        "Please enter the object description here"
298    ::= { pkiOCSPEntry 1 }
299
300responderID OBJECT-TYPE
301    SYNTAX          DisplayString (SIZE  (0..255))
302    MAX-ACCESS      read-only
303    STATUS          current
304    DESCRIPTION
305        "An identifier of the responder (DN name or a hash of its key)"
306    ::= { pkiOCSPEntry 2 }
307
308thisUpdate OBJECT-TYPE
309    SYNTAX          DisplayString (SIZE  (0..255))
310    MAX-ACCESS      read-only
311    STATUS          current
312    DESCRIPTION
313        "The issuing time of the revocation information."
314    ::= { pkiOCSPEntry 3 }
315
316nexUpdate OBJECT-TYPE
317    SYNTAX          DisplayString (SIZE  (0..255))
318    MAX-ACCESS      read-only
319    STATUS          current
320    DESCRIPTION
321        "The issuing time of the revocation information that will update
322        that one."
323    ::= { pkiOCSPEntry 4 }
324
325
326ciscoPkiEnrollmentTable OBJECT-TYPE
327    SYNTAX          SEQUENCE OF EnrollProfEntry
328    MAX-ACCESS      not-accessible
329    STATUS          current
330    DESCRIPTION
331        "Please enter the Table Description here."
332    ::= { ciscoPkiEnrollmentProfile 1 }
333
334enrollProfEntry OBJECT-TYPE
335    SYNTAX          EnrollProfEntry
336    MAX-ACCESS      not-accessible
337    STATUS          current
338    DESCRIPTION
339        "An entry (conceptual row) in the xxxTable."
340    INDEX           { enrollProfLabel }
341    ::= { ciscoPkiEnrollmentTable 1 }
342
343EnrollProfEntry ::= SEQUENCE {
344        enrollProfLabel    DisplayString,
345        enrolCredentials   DisplayString,
346        authLocation       DisplayString,
347        authMethod         DisplayString,
348        authVrf            DisplayString,
349        authSourceInter    DisplayString,
350        enrolMethod        DisplayString,
351        enrolLocation      DisplayString,
352        enrolVrf           DisplayString,
353        enrolSourceInter   DisplayString,
354        reenrolMethod      DisplayString,
355        reenrolLocation    DisplayString,
356        reenrolVrf         DisplayString,
357        reenrolSourceInter DisplayString
358}
359
360enrollProfLabel OBJECT-TYPE
361    SYNTAX          DisplayString (SIZE  (0..255))
362    MAX-ACCESS      not-accessible
363    STATUS          current
364    DESCRIPTION
365        "Unique value to display Enrollment Label.
366
367        If enrollment profiles are not present, string size of 0 will
368        show nothing."
369    ::= { enrollProfEntry 3 }
370
371enrolCredentials OBJECT-TYPE
372    SYNTAX          DisplayString
373    MAX-ACCESS      read-only
374    STATUS          current
375    DESCRIPTION
376        "Please enter the object description here"
377    ::= { enrollProfEntry 4 }
378
379authLocation OBJECT-TYPE
380    SYNTAX          DisplayString
381    MAX-ACCESS      read-only
382    STATUS          current
383    DESCRIPTION
384        "Please enter the object description here"
385    ::= { enrollProfEntry 5 }
386
387authMethod OBJECT-TYPE
388    SYNTAX          DisplayString
389    MAX-ACCESS      read-only
390    STATUS          current
391    DESCRIPTION
392        "Please enter the object description here"
393    ::= { enrollProfEntry 6 }
394
395authVrf OBJECT-TYPE
396    SYNTAX          DisplayString
397    MAX-ACCESS      read-only
398    STATUS          current
399    DESCRIPTION
400        "Please enter the object description here"
401    ::= { enrollProfEntry 7 }
402
403authSourceInter OBJECT-TYPE
404    SYNTAX          DisplayString
405    MAX-ACCESS      read-only
406    STATUS          current
407    DESCRIPTION
408        "Please enter the object description here"
409    ::= { enrollProfEntry 8 }
410
411enrolMethod OBJECT-TYPE
412    SYNTAX          DisplayString (SIZE  (0..255))
413    MAX-ACCESS      read-only
414    STATUS          current
415    DESCRIPTION
416        "Enrollment method will be displayed which will be used to
417        authenticate and enroll.
418
419        If enrollment method is configured as terminal, this parameter
420        gives
421        enrollment terminal
422
423        If enrollment method is configured with url, this parameter
424        returns
425        enrollment url ip_addresss
426
427        If vrf is configured as part of enrollment url, it will be
428        shown
429        as part of enrollment url ip_address vrf interface"
430    ::= { enrollProfEntry 9 }
431
432enrolLocation OBJECT-TYPE
433    SYNTAX          DisplayString
434    MAX-ACCESS      read-only
435    STATUS          current
436    DESCRIPTION
437        "Please enter the object description here"
438    ::= { enrollProfEntry 10 }
439
440enrolVrf OBJECT-TYPE
441    SYNTAX          DisplayString
442    MAX-ACCESS      read-only
443    STATUS          current
444    DESCRIPTION
445        "Please enter the object description here"
446    ::= { enrollProfEntry 11 }
447
448enrolSourceInter OBJECT-TYPE
449    SYNTAX          DisplayString
450    MAX-ACCESS      read-only
451    STATUS          current
452    DESCRIPTION
453        "Please enter the object description here"
454    ::= { enrollProfEntry 12 }
455
456reenrolMethod OBJECT-TYPE
457    SYNTAX          DisplayString
458    MAX-ACCESS      read-only
459    STATUS          current
460    DESCRIPTION
461        "Please enter the object description here"
462    ::= { enrollProfEntry 13 }
463
464reenrolLocation OBJECT-TYPE
465    SYNTAX          DisplayString
466    MAX-ACCESS      read-only
467    STATUS          current
468    DESCRIPTION
469        "Please enter the object description here"
470    ::= { enrollProfEntry 14 }
471
472reenrolVrf OBJECT-TYPE
473    SYNTAX          DisplayString
474    MAX-ACCESS      read-only
475    STATUS          current
476    DESCRIPTION
477        "Please enter the object description here"
478    ::= { enrollProfEntry 15 }
479
480reenrolSourceInter OBJECT-TYPE
481    SYNTAX          DisplayString
482    MAX-ACCESS      read-only
483    STATUS          current
484    DESCRIPTION
485        "Please enter the object description here"
486    ::= { enrollProfEntry 16 }
487
488
489pkiTPTable OBJECT-TYPE
490    SYNTAX          SEQUENCE OF PkiTPEntry
491    MAX-ACCESS      not-accessible
492    STATUS          current
493    DESCRIPTION
494        "Please enter the Table Description here."
495    ::= { ciscoPkiTrustpoints 1 }
496
497pkiTPEntry OBJECT-TYPE
498    SYNTAX          PkiTPEntry
499    MAX-ACCESS      not-accessible
500    STATUS          current
501    DESCRIPTION
502        "An entry (conceptual row) in the xxxTable."
503    INDEX           { tpLabel }
504    ::= { pkiTPTable 1 }
505
506PkiTPEntry ::= SEQUENCE {
507        tpLabel          DisplayString,
508        subjectName      DisplayString,
509        subjectAltName   DisplayString,
510        aaaListInfo      DisplayString,
511        enrollmentConfig DisplayString,
512        vrfConfig        DisplayString,
513        sourceInter      DisplayString,
514        autoEnroll       DisplayString,
515        keyPairLabel     DisplayString,
516        revocationMethod DisplayString,
517        hashAlgo         DisplayString,
518        trustpointState  DisplayString
519}
520
521tpLabel OBJECT-TYPE
522    SYNTAX          DisplayString (SIZE  (0..255))
523    MAX-ACCESS      not-accessible
524    STATUS          current
525    DESCRIPTION
526        "Unique name of Trustpoint Label.
527
528        When there is no trustpoint configured, size 0 shows no
529        trustpoint configured."
530    ::= { pkiTPEntry 1 }
531
532subjectName OBJECT-TYPE
533    SYNTAX          DisplayString (SIZE  (0..255))
534    MAX-ACCESS      read-only
535    STATUS          current
536    DESCRIPTION
537        "Subject name configured under the trustpoint will be returned"
538    ::= { pkiTPEntry 2 }
539
540subjectAltName OBJECT-TYPE
541    SYNTAX          DisplayString (SIZE  (0..50))
542    MAX-ACCESS      read-only
543    STATUS          current
544    DESCRIPTION
545        "subject alternate name configured under the trustpoint which
546        can be used while generating the csr."
547    ::= { pkiTPEntry 3 }
548
549aaaListInfo OBJECT-TYPE
550    SYNTAX          DisplayString (SIZE  (0..50))
551    MAX-ACCESS      read-only
552    STATUS          current
553    DESCRIPTION
554        "Returns AAA authorization list to be used configured under
555        trustpoint.
556
557        AAA authorization list will be used during peer certificate
558        validations etc.
559
560        In order to access information on AAA list, please check AAA MIB
561        corresponding to this AAA label."
562    ::= { pkiTPEntry 4 }
563
564enrollmentConfig OBJECT-TYPE
565    SYNTAX          DisplayString (SIZE  (0..255))
566    MAX-ACCESS      read-only
567    STATUS          current
568    DESCRIPTION
569        "Enrollment configuration which is configured under the
570       trustpoint will be returned."
571    ::= { pkiTPEntry 5 }
572
573vrfConfig OBJECT-TYPE
574    SYNTAX          DisplayString (SIZE  (0..50))
575    MAX-ACCESS      read-only
576    STATUS          current
577    DESCRIPTION
578        "VRF interface configured under trustpoint which can be used for
579        enrollment and obtaining CRL's"
580    ::= { pkiTPEntry 6 }
581
582sourceInter OBJECT-TYPE
583    SYNTAX          DisplayString (SIZE  (0..50))
584    MAX-ACCESS      read-only
585    STATUS          current
586    DESCRIPTION
587        "source Interface configured under trustpoint."
588    ::= { pkiTPEntry 7 }
589
590autoEnroll OBJECT-TYPE
591    SYNTAX          DisplayString (SIZE  (0..20))
592    MAX-ACCESS      read-only
593    STATUS          current
594    DESCRIPTION
595        "If autoEnroll is configured under the trustpoint, autoEnroll
596        returns with the percentage configured.
597
598        If the percentage is not configured, but auto-enroll is
599        configured under trustpoint, this parameter return auto-enroll.
600
601        If percentage is configured, parameter returns
602        auto-enroll <percentage>"
603    ::= { pkiTPEntry 8 }
604
605keyPairLabel OBJECT-TYPE
606    SYNTAX          DisplayString (SIZE  (0..255))
607    MAX-ACCESS      read-only
608    STATUS          current
609    DESCRIPTION
610        "Displays keypairLabel associated to this trustpoint if it is
611        enrolled.
612
613        During authentication, we wont generate the keypair Label."
614    ::= { pkiTPEntry 10 }
615
616revocationMethod OBJECT-TYPE
617    SYNTAX          DisplayString (SIZE  (0..50))
618    MAX-ACCESS      read-only
619    STATUS          current
620    DESCRIPTION
621        "This object displays revocation check configured on the device.
622
623
624        If nothing is configured under the trustpoint, by default
625        revocation-check crl will be updated."
626    ::= { pkiTPEntry 11 }
627
628hashAlgo OBJECT-TYPE
629    SYNTAX          DisplayString
630    MAX-ACCESS      read-only
631    STATUS          current
632    DESCRIPTION
633        "Hash algorithm configured under the trustpoint.
634
635        This will be used while selecting the HASH algorithm when CA
636        server responded with GetCACapabilities list.
637
638        Default value is sha1"
639    ::= { pkiTPEntry 12 }
640
641trustpointState OBJECT-TYPE
642    SYNTAX          DisplayString (SIZE  (0..20))
643    MAX-ACCESS      read-only
644    STATUS          current
645    DESCRIPTION
646        "Trustpoint state displays following
647
648        1) Authenticated - Trustpoint is in Authenticated state.
649
650        2) Enrolled - Trustpoint is authenticated and enrolled.
651        Certificate state is granted.
652
653        3) Pending - Trustpoint is authenticated but enrollment is in
654        pending state. This means CA server returned PENDING for the
655        router certificate.
656
657        4) None - Trustpoint is neither authenticated nor enrolled."
658    DEFVAL          { "0" }
659    ::= { pkiTPEntry 13 }
660
661
662ciscoPkiCertInstallAlert NOTIFICATION-TYPE
663    OBJECTS         {
664                        certSerialNum,
665                        certIssuerName,
666                        certStartDate,
667                        certEndDate,
668                        certType,
669                        certTpLabel,
670                        certSubName
671                    }
672    STATUS          current
673    DESCRIPTION
674        "When a certificate is installed on the device, notification
675        will be sent with following information.
676
677        a)   Certificates Serial number
678        b)   Certificate Issuer-name
679        c)   Certificate Subject name
680        d)   Trustpoint name
681        e)   Type of certificate. (i.e. CA/ID) certificate
682        f)   Certificate Start Date
683        g)   Certificate End Date
684
685        Alert will not be sent for RA certificates, trustpool
686        certificates and self-signed non-persistent certificates."
687   ::= { ciscoPkiMIBNotifs 1 }
688
689ciscoPkiCertExpiryAlert NOTIFICATION-TYPE
690    OBJECTS         {
691                        certSerialNum,
692                        certSubName,
693                        certIssuerName,
694                        certType,
695                        certTpLabel,
696                        certRemainingLife
697                    }
698    STATUS          current
699    DESCRIPTION
700        "Certificate Expiry alert consists of following
701        a)   Certificate Serial number
702        b)   Certificate Issuer-name
703        c)   Trustpoint name
704        d)   Type of certificate (i.e. CA/ID/SUBCA/RA)
705        e)   Certificate remaining lifetime in seconds.
706        f)   Certificate subject-name
707
708        When a certificate is reaching its expiry on the router, a trap
709        will be sent to SNMP server at regular intervals starting from
710        60days to till 1week. From 1week onwards daily one trap will be
711        sent with
712        following information
713
714        a)   Certificate Serial number
715        b)   Certificate Issuer-name
716        c)   Trustpoint name
717        d)   Type of certificate (i.e. CA/ID)
718        e)   Certificate remaining lifetime.
719
720        Alert will not be sent if trustpoint is configured with
721        auto-enroll and corresponding shadow certificate/rollover
722        certificate is present provided, shadow/rollover certificates
723        start time is same/behind certificate end time.
724
725        If shadow/rollover certificate start time is ahead of
726       certificate end time, alerts will be continued to send because
727        shadow certificate wont be valid from certificates expiry
728        time.
729
730        Expiry alerts will not be sent for trustpool certificates."
731   ::= { ciscoPkiMIBNotifs 2 }
732ciscoPkiMIBCompliances  OBJECT IDENTIFIER
733    ::= { ciscoPkiMIBConform 1 }
734
735ciscoPkiMIBGroups  OBJECT IDENTIFIER
736    ::= { ciscoPkiMIBConform 2 }
737
738
739ciscoPkiMIBCompliance MODULE-COMPLIANCE
740    STATUS          current
741    DESCRIPTION
742        "This is a default module-compliance
743        containing default object groups."
744    MODULE          -- this module
745    MANDATORY-GROUPS {
746                        ciscoPkiMIBMainObjectGroup,
747                        ciscoPkiMIBNotificationGroup
748                    }
749    ::= { ciscoPkiMIBCompliances 1 }
750
751-- Units of Conformance
752
753ciscoPkiMIBMainObjectGroup OBJECT-GROUP
754    OBJECTS         {
755                        enrolMethod,
756                        trustpointState,
757                        revocationMethod,
758                        enrollmentConfig,
759                        subjectName,
760                        subjectAltName,
761                        aaaListInfo,
762                        vrfConfig,
763                        sourceInter,
764                        autoEnroll,
765                        keyPairLabel,
766                        issuerName,
767                        sequenceNumb,
768                        nextUpdate,
769                        crlSize,
770                        deltaCRLFlag,
771                        responderID,
772                        thisUpdate,
773                        nexUpdate,
774                        certRemainingLife,
775                        certSerialNum,
776                        certIssuerName,
777                        certStartDate,
778                        certEndDate,
779                        certType,
780                        certTpLabel,
781                        certSubName,
782                        hashAlgo,
783                        enrolCredentials,
784                        authLocation,
785                        authMethod,
786                        authVrf,
787                        authSourceInter,
788                        enrolLocation,
789                        enrolVrf,
790                        enrolSourceInter,
791                        reenrolMethod,
792                        reenrolLocation,
793                        reenrolVrf,
794                        reenrolSourceInter
795                    }
796    STATUS          current
797    DESCRIPTION
798        "The is a test group."
799    ::= { ciscoPkiMIBGroups 1 }
800
801ciscoPkiMIBNotificationGroup NOTIFICATION-GROUP
802   NOTIFICATIONS    {
803                        ciscoPkiCertInstallAlert,
804                        ciscoPkiCertExpiryAlert
805                    }
806    STATUS          current
807    DESCRIPTION
808        "Notification alert group consists of both installation and
809        expiry notifications."
810    ::= { ciscoPkiMIBGroups 2 }
811
812END
813
814