All MIBs › CM-SECURITY-MIB › f3CaProfileRenewalNewKeyPairGenControl
f3CaProfileRenewalNewKeyPairGenControl
Module: CM-SECURITY-MIB
OID (symbolic): CM-SECURITY-MIB::f3CaProfileRenewalNewKeyPairGenControl
OID (numeric): 1.3.6.1.4.1.2544.1.12.10.1.29.1.7
Node type: OBJECT-TYPE
Type: TruthValue
Access: read-create
Description: This obect allows to specify if the RSA key pair is regenerated prior to each certificate renewal.
What is f3CaProfileRenewalNewKeyPairGenControl?
This read-create TruthValue specifies whether a new RSA key pair is generated prior to each certificate renewal under this CA profile. An admin enables this to follow security best practice of rotating keys on renewal rather than reusing the same key indefinitely. For example, enabling this ensures each renewed certificate under the profile gets a freshly generated key pair instead of just extending the old certificate on the same key.
OID Breakdown
Upper-level ancestors (9 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.2544 | advaMIB | ADVA-MIB |
| 1.3.6.1.4.1.2544.1 | products | ADVA-MIB |
| 1.3.6.1.4.1.2544.1.12 | fsp150cm | ADVA-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.2544.1.12.10 | cmSecurityMIB | CM-SECURITY-MIB |
| 1.3.6.1.4.1.2544.1.12.10.1 | cmSecurityObjects | CM-SECURITY-MIB |
| 1.3.6.1.4.1.2544.1.12.10.1.29 | f3CaProfileTable | CM-SECURITY-MIB |
| 1.3.6.1.4.1.2544.1.12.10.1.29.1 | f3CaProfileEntry | CM-SECURITY-MIB |
| 1.3.6.1.4.1.2544.1.12.10.1.29.1.7 | f3CaProfileRenewalNewKeyPairGenControl | CM-SECURITY-MIB |