All MIBs › CISCOSB-SSL › rlSslCertificateGenerationPassphrase
rlSslCertificateGenerationPassphrase
Module: CISCOSB-SSL
OID (symbolic): CISCOSB-SSL::rlSslCertificateGenerationPassphrase
OID (numeric): 1.3.6.1.4.1.9.6.1.101.100.1.1.11
Node type: OBJECT-TYPE
Type: DisplayString
Access: read-write
Description: When a RSA key is generated (generateRsaKeyAndSelfSignedCertificate) this passphrase is saved in flash and when the time comes and the certificate and the key are exported in PKCS12 format this passphrase is used to encrypt it. If the passphrase is empty the key and certificate can not be exported. There is no method of obtaining this passphrase once a key was generated.
What is rlSslCertificateGenerationPassphrase?
This read-write DisplayString stores the passphrase that will be used to encrypt an RSA key/certificate pair when it is later exported in PKCS12 format, and the MIB notes that once set there is no way to read this passphrase back out. Admins set it immediately after generating a new RSA key so the certificate can later be exported securely; leaving it empty permanently blocks PKCS12 export of that key. For example, an admin sets a strong passphrase here right after generating a new key so that an export to PKCS12 for backup won't fail due to a blank passphrase.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.100.1.1.11 snmpwalk -v2c -c public <target> CISCOSB-SSL::rlSslCertificateGenerationPassphrase
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.9.6.1.101.100.1.1.11.1 snmpget -v2c -c public <target> CISCOSB-SSL::rlSslCertificateGenerationPassphrase.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.9.6.1.101.100.1.1.11.1 s <value>
Start monitoring Cisco Small Business managed switch with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the CISCOSB-SSL::rlSslCertificateGenerationPassphrase OID value, configure state conditions and alerts, and monitor any Cisco Small Business managed switch from a single console.
OID Breakdown
Upper-level ancestors (11 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.9 | cisco | CAT2600-MIB |
| 1.3.6.1.4.1.9.6 | otherEnterprises | CISCO-SMI |
| 1.3.6.1.4.1.9.6.1 | ciscoSB | CISCO-SMI |
| 1.3.6.1.4.1.9.6.1.101 | switch001 | CISCOSB-MIB |
| 1.3.6.1.4.1.9.6.1.101.100 | rlSsl | CISCOSB-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.9.6.1.101.100.1 | rlSslCertificateGenerationTable | CISCOSB-SSL |
| 1.3.6.1.4.1.9.6.1.101.100.1.1 | rlSslCertificateGenerationEntry | CISCOSB-SSL |
| 1.3.6.1.4.1.9.6.1.101.100.1.1.11 | rlSslCertificateGenerationPassphrase | CISCOSB-SSL |