BAY-STACK-DIGITAL-CERT

All MIBs › BAY-STACK-DIGITAL-CERT

Organization: Avaya

Last Updated: 2017-09-21

Category: VPN and Security, Vendor: Avaya

Description: Manages digital certificate storage, enrollment, and status on Avaya/Nortel BayStack ERS switches.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is BAY-STACK-DIGITAL-CERT?

BAY-STACK-DIGITAL-CERT is a Nortel/Avaya BayStack/ERS (Ethernet Routing Switch) enterprise MIB that manages digital certificate storage, enrollment, and status used for secure management protocols (e.g., HTTPS, SSH, 802.1X) on the switch. It exposes configuration data describing certificate subject fields (common name, organization, locality, country, email), certificate storage resource/name, and PKCS#12 passphrase handling, plus notification objects for certificate-related events. Its monitoring value is chiefly software/security-state oriented -- confirming a valid certificate is installed with expected subject attributes, tracking enrollment success/failure, and alerting via traps on certificate issues (e.g., expiry or enrollment failure) -- rather than hardware sensors. It is a self-contained Avaya/Nortel enterprise MIB, though certificate handling here parallels concepts from standard PKI/X.509 management. It is deployed on Avaya/Nortel BayStack and Ethernet Routing Switch (ERS) products in environments requiring certificate-based secure management access. Network engineers evaluating or troubleshooting this functionality can download the BAY-STACK-DIGITAL-CERT file directly to load it into their MIB browser.

IPNetwork Monitor allows you to monitor SNMP objects defined in BAY-STACK-DIGITAL-CERT. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Avaya/Nortel BayStack switch
Avaya Ethernet Routing Switch (ERS)

Monitoring Examples

An administrator would check bsDigitalCertSubjectCommonName, bsDigitalCertSubjectFqdn, and related subject fields to confirm the installed certificate's identity matches the switch's hostname, and monitor bsDigitalCertNotifications traps to catch certificate enrollment failures or expirations. Polling bsDigitalCertLocalResource and bsDigitalCertLocalName would verify which certificate is currently active in local storage. A certificate subject mismatch or a missing bsDigitalCertLocalResource entry would indicate the switch is falling back to an unverified or self-signed certificate for secure management.

What Can Be Monitored

installed certificate subject fields
certificate local storage name/resource
certificate enrollment status
certificate-related trap notifications

Imported Objects

From RAPID-CITY

RcLongDisplayString

From SNMPv2-SMI

Integer32
MODULE-IDENTITY
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DateAndTime
DisplayString
RowStatus
TruthValue

From SYNOPTICS-ROOT-MIB

bayStackMibs

OBJECT-IDENTITY

OIDs

OID symbolic	OID numeric	Type	Access	Description
bayStackDigitalCert	1.3.6.1.4.1.45.5.48			Enterprise MIB for the Digital Certificate mibs.
INT bsDigitalCertAction	1.3.6.1.4.1.45.5.48.1.1.2.11	INTEGER	read-write	Specifies the action to be taken on the previously specified file
STR bsDigitalCertActionError	1.3.6.1.4.1.45.5.48.1.1.2.13	DisplayString	read-only	Displays the error message that occurent during the latest action, if any
INT bsDigitalCertActionStatus	1.3.6.1.4.1.45.5.48.1.1.2.12	INTEGER	read-only	Displays the status of the latest action
STR bsDigitalCertAssociatedContextName	1.3.6.1.4.1.45.5.48.1.4.1.2	DisplayString	not-accessible	Specifies the name of the associated context
INT bsDigitalCertAssociatedContextType	1.3.6.1.4.1.45.5.48.1.4.1.1	INTEGER	not-accessible	Specifies the type of the associated context
INT bsDigitalCertCaAction	1.3.6.1.4.1.45.5.48.1.3.1.5	INTEGER	read-create	specifies the various actions Certificate Authority can take- 'noop' - No operation 'caauth' - Athenticates the Certificate Authority (CA) based on the previously retrieved Root CA Certificate. 'enroll' - Certificate Enrolment Request. 'renew' - Certificate Renew Request. 'remove' - Removes the subject certificate obtained online from the Certificate Authority. 'getCrl' - Get the Certificate Revocation List from the CDP. 'genSelfSig'- Generate a self-signed certificate. 'getCaCert' - Retrieve Root CA certificate from the Certificate Authority
STR bsDigitalCertCaActionChallengePassword	1.3.6.1.4.1.45.5.48.1.3.1.6	DisplayString	read-create	specifies the challenge password required to perform the scep operation
T/F bsDigitalCertCaAuthenticated	1.3.6.1.4.1.45.5.48.1.3.1.7	TruthValue	read-only	Specifies whether the Online Certificate Authority is authenticated
STR bsDigitalCertCaCaUrl	1.3.6.1.4.1.45.5.48.1.3.1.4	RcLongDisplayString	read-create	Defines the URL of the Certificate Authority issuing the Digital Certificate
T/F bsDigitalCertCaChainComplete	1.3.6.1.4.1.45.5.48.1.3.1.14	TruthValue	read-only	Specifies whether the CA entry contains a complete certificate chain
STR bsDigitalCertCaCommonName	1.3.6.1.4.1.45.5.48.1.3.1.2	DisplayString	read-create	Defines the Common Name of the Certificate Authority issuing the Digital Certificate
bsDigitalCertCaEntry	1.3.6.1.4.1.45.5.48.1.3.1		not-accessible	Entry containing information about the Certificate Authority
STR bsDigitalCertCaKeyName	1.3.6.1.4.1.45.5.48.1.3.1.3	DisplayString	read-create	Defines the name of the associated key pair . It refers to the Key Name entry of the bsDigitalCertKeyTable
STR bsDigitalCertCaLastActionFailureReason	1.3.6.1.4.1.45.5.48.1.3.1.9	DisplayString	read-only	Defines the reason of failure for the last action performed by the Certificate Authority
INT bsDigitalCertCaLastActionStatus	1.3.6.1.4.1.45.5.48.1.3.1.8	INTEGER	read-only	Specifies the status of the last action 'none' - No action was performed yet. 'success' - Execution of the action triggered is completed successfully. 'failed' - Execution of the action triggered has failed. 'inProgress' - Execution of the action triggered is in progress.
STR bsDigitalCertCaName	1.3.6.1.4.1.45.5.48.1.3.1.1	DisplayString	not-accessible	User defined name referring to the Certificate Authority issuing the Digital Certificate
ROW bsDigitalCertCaRowStatus	1.3.6.1.4.1.45.5.48.1.3.1.15	RowStatus	read-create	Used to create/delete entries
I32 bsDigitalCertCaSubjectCertificateValidityDays	1.3.6.1.4.1.45.5.48.1.3.1.10	Integer32	read-create	Number of days for which subject certificate will remain valid
bsDigitalCertCaTable	1.3.6.1.4.1.45.5.48.1.3		not-accessible	Table containing all the information related to the Certificate Authority issuing the Digital Certificate
T/F bsDigitalCertCaUsePost	1.3.6.1.4.1.45.5.48.1.3.1.11	TruthValue	read-create	specifies the HTTP request type : URL or POST , TRUE for EJBCA and FALSE for Win2012 CA
STR bsDigitalCertCdpUrl	1.3.6.1.4.1.45.5.48.1.4.1.23	RcLongDisplayString	read-only	Specifies the CDP URL present in the Extensions field of the Digital Certificate.
STR bsDigitalCertCertificateSignature	1.3.6.1.4.1.45.5.48.1.4.1.14	RcLongDisplayString	read-only	Specifies the issuer's signature on the certificate for the subject as issued by the Certificate Authority
INT bsDigitalCertCertificateSignatureAlgorithm	1.3.6.1.4.1.45.5.48.1.4.1.13	INTEGER	read-only	Specifies the algorithm used for the issuer's signature on the certificate for the subject as issued by the Certificate Authority
I32 bsDigitalCertChainPosition	1.3.6.1.4.1.45.5.48.1.4.1.5	Integer32	read-only	Certificate position in the chain or 0 if certificate is not part of the chain
STR bsDigitalCertDestinationContextName	1.3.6.1.4.1.45.5.48.1.1.3.5	DisplayString	read-write	The name of the context where to place the source file or its copy
INT bsDigitalCertDestinationContextType	1.3.6.1.4.1.45.5.48.1.1.3.6	INTEGER	read-write	The type of the context where to place the source file or its copy
STR bsDigitalCertDestinationFileName	1.3.6.1.4.1.45.5.48.1.1.3.4	DisplayString	read-write	A new name for the source file or its copy
bsDigitalCertEntry	1.3.6.1.4.1.45.5.48.1.4.1		not-accessible	Entry containing information about digital certificates
STR bsDigitalCertExtendedKeyUsage	1.3.6.1.4.1.45.5.48.1.4.1.25	DisplayString	read-only	Specifies the purpose for which the key may be used, in addition to or in place of the basic purposes indicated in the key-usage field of the certificate.
INT bsDigitalCertFileAction	1.3.6.1.4.1.45.5.48.1.1.3.7	INTEGER	read-write	Specifies the action to be taken on the previously specified file. Moving a file within the same CA entry will result in a rename.
STR bsDigitalCertFileAssociatedContextName	1.3.6.1.4.1.45.5.48.1.1.2.4	DisplayString	read-write	The name of the context to associate imported and exported files
INT bsDigitalCertFileAssociatedContextType	1.3.6.1.4.1.45.5.48.1.1.2.5	INTEGER	read-write	The type of the context to associate imported and exported files
bsDigitalCertFileMgmt	1.3.6.1.4.1.45.5.48.1.1.3
STR bsDigitalCertFileName	1.3.6.1.4.1.45.5.48.1.4.1.3	RcLongDisplayString	not-accessible	Specifies the common name value of the certificate subject
INT bsDigitalCertFileSupport	1.3.6.1.4.1.45.5.48.1.1.2.7	INTEGER	read-write	The storage type of the file to be imported or exported
T/F bsDigitalCertForceReplacement	1.3.6.1.4.1.45.5.48.1.1.2.10	TruthValue	read-write	Controls whether a name conflict will be resolved by replacing the old file with the new one
T/F bsDigitalCertHasBasicConstraint	1.3.6.1.4.1.45.5.48.1.4.1.18	TruthValue	read-only	Specifies whether certificate contains basic certificate constraint
T/F bsDigitalCertHasKeyUsage	1.3.6.1.4.1.45.5.48.1.4.1.19	TruthValue	read-only	Specifies whether certificate contains basic key usage constraint
bsDigitalCertImportExport	1.3.6.1.4.1.45.5.48.1.1.2
T/F bsDigitalCertIsCa	1.3.6.1.4.1.45.5.48.1.4.1.20	TruthValue	read-only	Specifies whether this is Certificate Authority's certificate or not
STR bsDigitalCertIssuerName	1.3.6.1.4.1.45.5.48.1.4.1.10	RcLongDisplayString	read-only	Specifies the issuer's name of the certificate for the subject as issued by the Certificate Authority
bsDigitalCertKeyEntry	1.3.6.1.4.1.45.5.48.1.2.1		not-accessible	The entry specifies the key-pair name, size, the algorithm used for the generation of key-pair and if the user is allowed to export it.
STR bsDigitalCertKeyFingerprint	1.3.6.1.4.1.45.5.48.1.2.1.4	DisplayString	read-only	Displays the SHA1 fingerprint of the key pair
STR bsDigitalCertKeyName	1.3.6.1.4.1.45.5.48.1.2.1.1	DisplayString	not-accessible	Refers to the name of the key-pair generated or imported for the subject
ROW bsDigitalCertKeyRowStatus	1.3.6.1.4.1.45.5.48.1.2.1.5	RowStatus	read-create	Used to create/delete entries
I32 bsDigitalCertKeySize	1.3.6.1.4.1.45.5.48.1.2.1.3	Integer32	read-only	Defines the size of the key-pair to be generated
bsDigitalCertKeyTable	1.3.6.1.4.1.45.5.48.1.2		not-accessible	Table containing all the information related to the key-pair, required to get the Digital Certificate from the Certificate Authority.
INT bsDigitalCertKeyType	1.3.6.1.4.1.45.5.48.1.2.1.2	INTEGER	read-only	Defines the algorithm used to generate the key-pair
BIT bsDigitalCertKeyUsage	1.3.6.1.4.1.45.5.48.1.4.1.21	Bits	read-only	specifies the purpose of the key used in the certificate. It is represented in form of bits as follows- bit 0 - digitalSignature bit 1 - nonRepudiation bit 2 - keyEncipherment bit 3 - dataEncipherment bit 4 - keyAgreement bit 5 - keyCertSign bit 6 - cRLSign bit 7 - encipherOnly bit 8 - decipherOnly
STR bsDigitalCertLocalName	1.3.6.1.4.1.45.5.48.1.1.2.3	DisplayString	read-write	The name of the file or key pair to be imported or exported from nvram. Ignored for CSR, PKCS#7 and PKCS#12.
INT bsDigitalCertLocalResource	1.3.6.1.4.1.45.5.48.1.1.2.1	INTEGER	read-write	The type of resource to be exported
STR bsDigitalCertMd5Hash	1.3.6.1.4.1.45.5.48.1.4.1.7	DisplayString	read-only	MD5 certificate fingerprint
bsDigitalCertNotifications	1.3.6.1.4.1.45.5.48.0
bsDigitalCertObjects	1.3.6.1.4.1.45.5.48.1
STR bsDigitalCertOcspUrl	1.3.6.1.4.1.45.5.48.1.4.1.24	RcLongDisplayString	read-only	Specifies the OCSP URL present in the AIA field of the Digital Certificate.
STR bsDigitalCertPkcs12Passphrase	1.3.6.1.4.1.45.5.48.1.1.2.2	DisplayString	read-write	Specifies the passphrase to use for encrypting and decrypting pkcs#12 containers
T/F bsDigitalCertRegenerateKeyOnEnroll	1.3.6.1.4.1.45.5.48.1.3.1.13	TruthValue	read-create	Specifies whether the associated key pair will be regenerated on re-enroll
STR bsDigitalCertRemoteFileName	1.3.6.1.4.1.45.5.48.1.1.2.6	DisplayString	read-write	The address and name of the file to be imported or exported on a remote location
bsDigitalCertScalars	1.3.6.1.4.1.45.5.48.1.1
STR bsDigitalCertSerialNumber	1.3.6.1.4.1.45.5.48.1.4.1.9	DisplayString	read-only	Specifies the serial number of the certificate for the subject as issued by the Certificate Authority
STR bsDigitalCertSftpUsername	1.3.6.1.4.1.45.5.48.1.1.2.8	DisplayString	read-write	The username to log into when accessing the SFTP server
STR bsDigitalCertSha1Hash	1.3.6.1.4.1.45.5.48.1.4.1.6	DisplayString	read-only	SHA1 certificate fingerprint
STR bsDigitalCertSourceContextName	1.3.6.1.4.1.45.5.48.1.1.3.2	DisplayString	read-write	The name of the context where the source file is located
INT bsDigitalCertSourceContextType	1.3.6.1.4.1.45.5.48.1.1.3.3	INTEGER	read-write	The type of the context where the source file is located
STR bsDigitalCertSourceFileName	1.3.6.1.4.1.45.5.48.1.1.3.1	DisplayString	read-write	The name of the file to be copied, moved or renamed
STR bsDigitalCertStatus	1.3.6.1.4.1.45.5.48.1.4.1.22	DisplayString	read-only	Specifies the status of the certificate
STR bsDigitalCertSubject	1.3.6.1.4.1.45.5.48.1.4.1.15	RcLongDisplayString	read-only	Specifies the details of the subject on its certificate as issued by Certificate Authority
STR bsDigitalCertSubjectCommonName	1.3.6.1.4.1.45.5.48.1.1.1.1	DisplayString	read-write	The value of the Common Name field of the subject sending the Certificate Signing Request to the Certificate Authority
STR bsDigitalCertSubjectCountry	1.3.6.1.4.1.45.5.48.1.1.1.7	DisplayString	read-write	The name of the country of the subject sending the Certificate Signing Request to the Certificate Authority
STR bsDigitalCertSubjectEmailAddress	1.3.6.1.4.1.45.5.48.1.1.1.2	DisplayString	read-write	The Email Address of the subject sending the Certificate Signing Request to the Certificate Authority
STR bsDigitalCertSubjectFqdn	1.3.6.1.4.1.45.5.48.1.1.1.9	DisplayString	read-write	The fully qualified name of the subject
T/F bsDigitalCertSubjectIncludeIpAddress	1.3.6.1.4.1.45.5.48.1.1.1.8	TruthValue	read-write	Specifies whether all IP addresses will be included in the Subject Alternative Name extension of the Certificate Signing Request
STR bsDigitalCertSubjectLocality	1.3.6.1.4.1.45.5.48.1.1.1.5	DisplayString	read-write	The name of the Locality of the subject sending the Certificate Signing Request to the Certificate Authority
STR bsDigitalCertSubjectOrganization	1.3.6.1.4.1.45.5.48.1.1.1.4	DisplayString	read-write	The Organization of the subject sending the Certificate Signing Request to the Certificate Authority
STR bsDigitalCertSubjectOrganizationalUnit	1.3.6.1.4.1.45.5.48.1.1.1.3	DisplayString	read-write	The Organizational Unit field of the subject sending the Certificate Signing Request to the Certificate Authority
STR bsDigitalCertSubjectProvince	1.3.6.1.4.1.45.5.48.1.1.1.6	DisplayString	read-write	The Province name of the subject sending the Certificate Signing Request to the Certificate Authority
OCT bsDigitalCertSubjectPublicKey	1.3.6.1.4.1.45.5.48.1.4.1.17	OCTET STRING	read-only	Specifies the public key of the subject
INT bsDigitalCertSubjectPublicKeyAlgorithm	1.3.6.1.4.1.45.5.48.1.4.1.16	INTEGER	read-only	Specifies the algorithm used to generate the subject's public key for the certificate issued by the Certificate Authority
bsDigitalCertSubjectScalars	1.3.6.1.4.1.45.5.48.1.1.1
bsDigitalCertTable	1.3.6.1.4.1.45.5.48.1.4		not-accessible	Table of information about digital certificates
INT bsDigitalCertType	1.3.6.1.4.1.45.5.48.1.4.1.4	INTEGER	read-only	Identifies certificate role in a chain of trust 'caCert' - Root Certificate Authority's Certificate 'intermediateCaCert' - Intermediate Certificate Authority's Certificate 'subjectCert' - Subject Certificate 'raCert' - Registration Authority Certificate 'crl' - Certificate Revocation List
I32 bsDigitalCertUsbUnitNumber	1.3.6.1.4.1.45.5.48.1.1.2.9	Integer32	read-write	The unit number whose USB to access
BIT bsDigitalCertUseFor	1.3.6.1.4.1.45.5.48.1.3.1.12	Bits	read-create	Specifies for what features will use the subject certificate from this CA. Features are represented in form of bits as follows: bit 0 - IKE bit 1 - SSL server bit 2 - SSL client bit 3 - SLAmon bit 4 - Cloud
DAT bsDigitalCertValidEndPeriod	1.3.6.1.4.1.45.5.48.1.4.1.12	DateAndTime	read-only	Specifies the last date of the validation period of the certificate for the subject as issued by the Certificate Authority
DAT bsDigitalCertValidStartPeriod	1.3.6.1.4.1.45.5.48.1.4.1.11	DateAndTime	read-only	Specifies the start date of the validation period of the certificate for the subject as issued by the Certificate Authority
STR bsDigitalCertVersionNumber	1.3.6.1.4.1.45.5.48.1.4.1.8	DisplayString	read-only	Specifies the version number of the certificate for the subject as issued by the Certificate Authority

RFC description

Manages digital certificate configuration including subject information, import/export, and certificate chain management.

Start monitoring Avaya/Nortel BayStack Ethernet Routing Switch (ERS) (legacy) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download BAY-STACK-DIGITAL-CERT

What Is BAY-STACK-DIGITAL-CERT?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description