IEEE8021-DEVID-MIB
This is the management module of the Secure Device Identifier (DevID) for managing IEEE 802.1AR. As specified in the current IEEE 802.1AR draft document. This is the management module of the Secure Device Identifier (DevID) for managing IEEE 802.1AR. A DevID is cryptographically bound to a device, and supports authentication of the device's identity. Locally significant identities can be securely associated with an initial manufacturer-provisioned DevID and used in provisioning and authentication protocols to allow a network administrator to establish the trustworthiness of a device and select appropriate policies for transmission and reception of data and control protocols to and from the device. A device indicates any entity in an IEEE 802 LAN that seeks to obtain services from the network. The use of a Secure Device Identifier (DevID) in a DevID module allows network entities to associate a DevID credential with devices that participate or wish to participate in authenticated access to one or more networks. A device with DevID capability incorporates a globally unique manufacturer provided Initial SecureDevice Identifier (IDevID), stored in a way that ensures it will remain unmodified in the absence of both unrestricted access to the device and extraordinary efforts by an attacker. The device may support the creation of Locally Signification Device Identifiers (LDevIDs) by network administrator. Each LDevID is bound to the device in a way that makes it impossible for it to be forged or transferred to a device with a different IDevID without knowledge of the private key used to effect the crytographic binding. LDevID can incorporate, and fully protect, additional information specified by the network administrator to support local authorization conventions. LDevIDs may also be used to entirely replace IDevIDs in such a way as to assure the privacy of the user of a LDevID and the equipment in which it is installed. Every device has exactly one (IDevID) and zero or more LDevIDs. The number of LDevIDs depends upon the capabilities of the DevID module and on the administrative policy of the network(s) in which the device is used
Main OID:
ieee8021DevIDMIB.1.3.111.2.802.1.1.17
40
Objects
Active
Status
5
Dependencies
Imported Objects
Objects
40 total| Object Name |
|---|
ieee8021DevIDMIBThis is the management module of the Secure Device Identifier (DevID) for managing IEEE 802.1AR. As specified in the current IEEE 802.1AR draft document. This is the management module of the Secure Device Identifier (DevID) for managing IEEE 802.1AR. A DevID is cryptographically bound to a device, and supports authentication of the device's identity. Locally significant identities can be securely associated with an initial manufacturer-provisioned DevID and used in provisioning and authentication protocols to allow a network administrator to establish the trustworthiness of a device and select appropriate policies for transmission and reception of data and control protocols to and from the device. A device indicates any entity in an IEEE 802 LAN that seeks to obtain services from the network. The use of a Secure Device Identifier (DevID) in a DevID module allows network entities to associate a DevID credential with devices that participate or wish to participate in authenticated access to one or more networks. A device with DevID capability incorporates a globally unique manufacturer provided Initial SecureDevice Identifier (IDevID), stored in a way that ensures it will remain unmodified in the absence of both unrestricted access to the device and extraordinary efforts by an attacker. The device may support the creation of Locally Signification Device Identifiers (LDevIDs) by network administrator. Each LDevID is bound to the device in a way that makes it impossible for it to be forged or transferred to a device with a different IDevID without knowledge of the private key used to effect the crytographic binding. LDevID can incorporate, and fully protect, additional information specified by the network administrator to support local authorization conventions. LDevIDs may also be used to entirely replace IDevIDs in such a way as to assure the privacy of the user of a LDevID and the equipment in which it is installed. Every device has exactly one (IDevID) and zero or more LDevIDs. The number of LDevIDs depends upon the capabilities of the DevID module and on the administrative policy of the network(s) in which the device is used MODULE-IDENTITY .1.3.111.2.802.1.1.17 |
devIDMIBNotifications OBJECT IDENTIFIER .1.3.111.2.802.1.1.17.0 |
devIDMIBObjects OBJECT IDENTIFIER .1.3.111.2.802.1.1.17.1 |
devIDGlobalMIBObjects OBJECT IDENTIFIER .1.3.111.2.802.1.1.17.1.1 |
devIDMgmtMIBObjects OBJECT IDENTIFIER .1.3.111.2.802.1.1.17.1.2 |
devIDPublicKeyCountThis gives the total number of DevID public keys installed in the DevID module.ro Unsigned32 .1.3.111.2.802.1.1.17.1.2.1 |
devIDPublicKeyTableA table containing the public key, the keys keyIndex, a value indicating if the key is enabled. This allows the administrator to determine the DevID keys installed in the DevID module. The maximum number of entries in this table is limited by the value of devIDPublicKeyCount. SEQUENCE OF DevIDPublicKeyEntry .1.3.111.2.802.1.1.17.1.2.2 |
devIDPublicKeyEntryAn entry containing DevID public key, the keys keyIndex, a value indicating if the key is enabled DevIDPublicKeyEntry .1.3.111.2.802.1.1.17.1.2.2.1 |
devIDPublicKeyIndexAll keys are indexed internally with this object. The value of this object is within 0..devIDPublicKeyCount. This is the keyIndex and operations on keys will use the keyIndex to address a specific key. The IDevID key shall only be at index 0. Any error in retrieving a key will be displayed in the devIDPublicKeyErrStatus object. Unsigned32 (0..4294967295 ) .1.3.111.2.802.1.1.17.1.2.2.1.1 |
devIDPublicKeyEnabledThe enable/disable state of this public key. This setting persists across restarts.rw TruthValue (SNMPv2-TC) .1.3.111.2.802.1.1.17.1.2.2.1.2 |
devIDPublicKeyAlgorithmThe DevID PublicKey Algorithm field shall indicate the public key algorithm identifier. This object identifies the public key algorithm as either rsaEncryption or idecPublicKeyro DevIDAlgorithmIdentifier .1.3.111.2.802.1.1.17.1.2.2.1.3 |
devIDPublicKeyPubkeySHA1HashThe SHA1 Hash of this DevID public key.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.111.2.802.1.1.17.1.2.2.1.4 |
devIDPublicKeyErrStatusThe displays the status of an operation on the public key. The default value is none which means no error, indicating a successful operation.ro DevIDErrorStatus .1.3.111.2.802.1.1.17.1.2.2.1.5 |
devIDCredentialCountThis gives the total number of DevID credentials installed in the DevID module.ro Unsigned32 .1.3.111.2.802.1.1.17.1.2.3 |
devIDCredentialTableA table of current DevID credentials, where for each certificate the following are indicated: sha1 hash of the certificate, section7 defined fields of cert serial number, issuer, subject, HardwareModuleName, and pubkey. SEQUENCE OF DevIDCredentialEntry .1.3.111.2.802.1.1.17.1.2.4 |
devIDCredentialEntryAn entry containing DevID Credential information DevIDCredentialEntry .1.3.111.2.802.1.1.17.1.2.4.1 |
devIDCredentialIndexAll credentials are indexed internally with this object. The value of this object is within [0..devIDCredentialCount]. This is the credentialIndex and operations on credentials will use the credentialIndex to address a specific crdential. The IDevID credential shall only be at index 0. Additional operations on credentials use the credentialIndex to address a specific credential. Unsigned32 (0..4294967295 ) .1.3.111.2.802.1.1.17.1.2.4.1.1 |
devIDCredentialEnabledThe enable/disable state of this credential. This setting persists across restarts.rw TruthValue (SNMPv2-TC) .1.3.111.2.802.1.1.17.1.2.4.1.2 |
devIDCredentialSHA1HashThe SHA1 Hash of this DevID credential.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.111.2.802.1.1.17.1.2.4.1.3 |
devIDCredentialSerialNumberThe serial number of the credential.ro SnmpAdminString .1.3.111.2.802.1.1.17.1.2.4.1.4 |
devIDCredentialIssuerThe issuer field of the credential.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.111.2.802.1.1.17.1.2.4.1.5 |
devIDCredentialSubjectThe subject field of the credential.ro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.111.2.802.1.1.17.1.2.4.1.6 |
devIDCredentialSubjectAltNameThe subjectaltname field of the credentialro SnmpAdminString (SNMP-FRAMEWORK-MIB) .1.3.111.2.802.1.1.17.1.2.4.1.7 |
devIDCredentialEntityIndexThis refers to the entPhysicalIndex in entPhysicalTable to identify the associated physical entity.ro PhysicalIndex (ENTITY-MIB) .1.3.111.2.802.1.1.17.1.2.4.1.8 |
devIDCredentialPubkeyIndexHas the appropriate devIDPublicKeyIndex value from devIDPublicKeyTable to identify the public key information.ro Unsigned32 .1.3.111.2.802.1.1.17.1.2.4.1.9 |
devIDCredentialErrStatusThe displays the status of an operation on the credential. The default value is none which means no error, indicating a successful operation.ro DevIDErrorStatus .1.3.111.2.802.1.1.17.1.2.4.1.10 |
devIDStatisticsTableA table containing statistics information. SEQUENCE OF DevIDStatisticsEntry .1.3.111.2.802.1.1.17.1.2.5 |
devIDStatisticsEntryAn entry containing DevID statistics. DevIDStatisticsEntry .1.3.111.2.802.1.1.17.1.2.5.1 |
devIDStatisticKeyGenerationCountThis gives the total number of additional LDevID key material generation within the DevID module. Discontinuities occur at system restart and counter rollover.ro Counter32 .1.3.111.2.802.1.1.17.1.2.5.1.1 |
devIDStatisticKeyInsertionCountThis gives the total number of additional LDevID key material generation followed by an insertion within the DevID module. Discontinuities occur at system restart and counter rollover.ro Counter32 .1.3.111.2.802.1.1.17.1.2.5.1.2 |
devIDStatisticKeyDeletionCountThis gives the total number of LDevID keypair deletions within the DevID module. Discontinuities occur at system restart and counter rollover.ro Counter32 .1.3.111.2.802.1.1.17.1.2.5.1.3 |
devIDStatisticCSRGenerationCountThis gives the total number of Certificate Signing Request (CSR) generation as defined in RFC2986. Discontinuities occur at system restart and counter rollover.ro Counter32 .1.3.111.2.802.1.1.17.1.2.5.1.4 |
devIDStatisticCredentialInsertionCountThis gives the total number of LDevID credentials installed into the DevID module. Discontinuities occur at system restart and counter rollover.ro Counter32 .1.3.111.2.802.1.1.17.1.2.5.1.5 |
devIDStatisticCredentialDeletionCountThis gives the total number of LDevID credentials deletions into the DevID module. Discontinuities occur at system restart and counter rollover.ro Counter32 .1.3.111.2.802.1.1.17.1.2.5.1.6 |
devIDStatsMIBObjects OBJECT IDENTIFIER .1.3.111.2.802.1.1.17.1.3 |
devIDMIBConformance OBJECT IDENTIFIER .1.3.111.2.802.1.1.17.2 |
devIDMIBCompliances OBJECT IDENTIFIER .1.3.111.2.802.1.1.17.2.1 |
devIDMIBModuleComplianceModule Compliance for this mib. Unknown .1.3.111.2.802.1.1.17.2.1.1 |
devIDMIBGroups OBJECT IDENTIFIER .1.3.111.2.802.1.1.17.2.2 |
devIDMIBObjectGroupA collection of objects providing public key manageability, credential manageability and stats. Unknown .1.3.111.2.802.1.1.17.2.2.1 |