All MIBs › HP-AUTH-MIB › hpSwitchServerCertificateOperation
hpSwitchServerCertificateOperation
Module: HP-AUTH-MIB
OID (symbolic): HP-AUTH-MIB::hpSwitchServerCertificateOperation
OID (numeric): 1.3.6.1.4.1.11.2.14.11.5.1.16.13.1
Node type: OBJECT-TYPE
Type: INTEGER
Access: read-write
Description: When this object is read, it returns the last value that was written. If a value was not set previously, then the object value will be 'none'(1). The object supports the following values and actions: 'none' - no action is taken, null operation.
'useInstalled' - This causes the switch to use a previously installed server certificate, if one is present.
'createAndUseSelfSigned' - This causes the switch to create a new self-signed certificate based on the hpSwitchServerNewCertificate parameters and use it.
'createCACertReq' - This causes the switch to create a certificate request, which is to be signed by a CA authority, based on the hpSwitchServerNewCertificate parameters. The user must subsequently download the signed certificate to complete certificate creation process.
'applyCASignedCert' - This causes the switch to process the user's response to a signed certificate from a CA to complete the certificate creation process.
'abortCASignedRequest' - This causes the switch to abort the certificate request procedure, which was initiated on createAndUseCASigned set.
What is hpSwitchServerCertificateOperation?
This is an action object that drives the switch's SSL server-certificate lifecycle: useInstalled(2) reuses an existing certificate, createAndUseSelfSigned(3) generates and applies a new self-signed certificate from the hpSwitchServerNewCertificate* parameters, createCACertReq(4) generates a CSR for a CA to sign, applyCASignedCert(5) installs the CA's signed response, and abortCASignedRequest(6) cancels an in-progress CA request. Reading it back simply returns the last value written (or none(1) if never set), since it represents a command rather than persistent state; an admin drives it through this sequence to move from a self-signed cert to a properly CA-signed one.
Examples
Walk all instances (SNMPv2c):
snmpwalk -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.16.13.1 snmpwalk -v2c -c public <target> HP-AUTH-MIB::hpSwitchServerCertificateOperation
Get a specific instance (index 1):
snmpget -v2c -c public <target> 1.3.6.1.4.1.11.2.14.11.5.1.16.13.1.1 snmpget -v2c -c public <target> HP-AUTH-MIB::hpSwitchServerCertificateOperation.1
Set instance 1 (SNMPv2c):
snmpset -v2c -c private <target> 1.3.6.1.4.1.11.2.14.11.5.1.16.13.1.1 i <value>
Start monitoring HP ProCurve/Aruba (ICF-based) switch (802.1X/MAC authentication) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the HP-AUTH-MIB::hpSwitchServerCertificateOperation OID value, configure state conditions and alerts, and monitor any HP ProCurve/Aruba (ICF-based) switch (802.1X/MAC authentication) from a single console.
OID Breakdown
Upper-level ancestors (12 from the standard OID tree / other modules)
| Numeric OID | Name | Module |
|---|---|---|
| 1 | iso | LANART-AGENT |
| 1.3 | org | AirPair-MIB |
| 1.3.6 | dod | AirPair-MIB |
| 1.3.6.1 | internet | AirPair-MIB |
| 1.3.6.1.4 | private | AirPair-MIB |
| 1.3.6.1.4.1 | enterprises | AirPair-MIB |
| 1.3.6.1.4.1.11 | hp | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2 | nm | CLJ8500-MIB |
| 1.3.6.1.4.1.11.2.14 | icf | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11 | hpicfObjects | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5 | hpicfSwitch | CONFIG-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1 | hpSwitch | CONFIG-MIB |
| Numeric OID | Name | Module |
|---|---|---|
| 1.3.6.1.4.1.11.2.14.11.5.1.16 | hpSwitchAuthenticationMIB | HP-AUTH-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1.16.13 | hpSwitchCertConfig | HP-AUTH-MIB |
| 1.3.6.1.4.1.11.2.14.11.5.1.16.13.1 | hpSwitchServerCertificateOperation | HP-AUTH-MIB |