CISCO-UNIFIED-COMPUTING-PKI-MIB

Description: PKI certificate status, keyring configuration, modulus size, and certificate-enrollment FSM lifecycle for Cisco UCS

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

CISCO-UNIFIED-COMPUTING-PKI-MIB is part of the Cisco UCS management MIB family, handling Public Key Infrastructure (PKI) functions for UCS Manager, including keyring configuration, certificate signing requests, and the certificate-enrollment lifecycle. It exposes configuration data such as certificate request parameters (subject name, country, DNS name, email), key modulus size, and keyring identity, together with finite-state-machine (FSM) objects tracking the progress of a certificate enrollment. Its monitoring relevance is primarily software/security status: administrators can track whether a certificate request is pending, completed, or failed via the FSM lifecycle state, and verify keyring and modulus settings meet security policy before a certificate expires or an enrollment stalls. Like other UCS MIBs, its objects use a managed-object Dn/Rn addressing scheme, showing dependency on the broader Cisco UCS data-model MIB structure. It is typically deployed on Cisco UCS Manager-managed fabric interconnects and server domains where secure management-plane certificates (e.g., for HTTPS/KVM) must be provisioned and renewed. Engineers can download the CISCO-UNIFIED-COMPUTING-PKI-MIB file directly to load it into their MIB browser.

An admin would poll cucsPkiCertReqTable/cucsPkiCertReqEntry, keyed by cucsPkiCertReqDn/Rn, to check cucsPkiCertReqSubjName, cucsPkiCertReqCountry, and cucsPkiCertReqDns against the intended certificate request, and confirm cucsPkiCertReqIp matches the target CA server. If a certificate enrollment's FSM state remains stuck in a pending or failed phase instead of progressing to completion, that flags a PKI enrollment problem, such as an unreachable CA at cucsPkiCertReqIp or an authentication issue with cucsPkiCertReqPwd. Tracking these objects helps ensure UCS management-plane certificates are renewed before expiry, avoiding a loss of secure access to UCS Manager.

Manages public key infrastructure (PKI) for Cisco Unified Computing System environments.