PRIMEKEY-APPLIANCE-MIB

All MIBs › PRIMEKEY-APPLIANCE-MIB

Organization: www.primekey.com

Last Updated: 2021-07-17

Category: Security

Description: Monitors PrimeKey PKI appliance (HSM/CA) operational status, certificate authority health, and hardware security module state.

Start monitoring vendor-neutral, standards-based MIB, any SNMPv3-capable network device (SNMP engine identity/boot/clock status) with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

What Is PRIMEKEY-APPLIANCE-MIB?

This is a PrimeKey enterprise MIB for the PrimeKey EJBCA PKI appliance, a certificate authority (CA)/hardware security module (HSM) platform, used to monitor the appliance's overall hardware and operating environment. It exposes hardware environmental sensors, CPU temperature, CPU and multiple system fan speeds/status, and system load averages, alongside database usage percentage and status for the appliance's certificate/CA data store. This MIB is squarely focused on monitoring hardware and software status: CPU temperature and fan status indicate cooling and thermal risk, system load indicates CPU/software load, and database usage percentage/status indicates whether the CA's storage backend is healthy or nearing capacity. It appears to be a self-contained enterprise MIB without strong dependency on other standard MIBs beyond basic SNMP conventions. Typical deployment is on PrimeKey PKI/EJBCA appliances used by organizations to run their own certificate authority and HSM-backed key management infrastructure, where PRIMEKEY-APPLIANCE-MIB SNMP monitoring keeps administrators ahead of thermal, load, and database-capacity issues.

IPNetwork Monitor allows you to monitor SNMP objects defined in PRIMEKEY-APPLIANCE-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

PrimeKey EJBCA PKI/CA appliance
hardware security module (HSM) appliance

Monitoring Examples

An admin would poll pkASfpCpuTemp and pkASfpCpuFanStatus/pkASfpSysFansStatus to confirm the appliance's cooling system is healthy, and pkASfpLoad/pkASfpLoad1m to check CPU load trends. pkAVdbUsagePercent and pkAVdbStatus would be checked to ensure the CA's certificate database isn't running out of space or reporting an error state; a high pkAVdbUsagePercent combined with elevated pkASfpCpuTemp could indicate the appliance is under sustained heavy CA-issuance load. pkASfpVmStatus gives an overall system health summary useful for quick triage.

What Can Be Monitored

CPU temperature
CPU and system fan speed/status
system load average
database usage percentage
database status
overall system/VM status

Imported Objects

From SNMPv2-CONF

MODULE-COMPLIANCE
OBJECT-GROUP

From SNMPv2-SMI

MODULE-IDENTITY
OBJECT-TYPE
enterprises

OIDs

OID symbolic	OID numeric	Type	Access	Description
primekey	1.3.6.1.4.1.22408			PrimeKey EJBCA Appliance MIB
primeKeyAppliancePrefixOne	1.3.6.1.4.1.22408.1
primeKeyAppliancePrefixAnotherOne	1.3.6.1.4.1.22408.1.1
pkAppliance	1.3.6.1.4.1.22408.1.1.2
pkSfp	1.3.6.1.4.1.22408.1.1.2.1
pkSfpTwo	1.3.6.1.4.1.22408.1.1.2.1.2
pkSfpTwoV	1.3.6.1.4.1.22408.1.1.2.1.2.118
pkASfpVmStatusX	1.3.6.1.4.1.22408.1.1.2.1.2.118.109
OCT pkASfpVmStatus	1.3.6.1.4.1.22408.1.1.2.1.2.118.109.1	OCTET STRING	read-only	Status of all VMs, 0 if all are running, 1 otherwise
pkSfpThree	1.3.6.1.4.1.22408.1.1.2.1.3
pkSfpThreeC	1.3.6.1.4.1.22408.1.1.2.1.3.99
pkSfpThreeP	1.3.6.1.4.1.22408.1.1.2.1.3.99.112
pkASfpCpuTempX	1.3.6.1.4.1.22408.1.1.2.1.3.99.112.117
OCT pkASfpCpuTemp	1.3.6.1.4.1.22408.1.1.2.1.3.99.112.117.1	OCTET STRING	read-only	Temperature of the CPU in degrees celcius. Example: 34
pkSfpFour	1.3.6.1.4.1.22408.1.1.2.1.4
pkSfpFourF	1.3.6.1.4.1.22408.1.1.2.1.4.102
pkSfpFourA	1.3.6.1.4.1.22408.1.1.2.1.4.102.97
pkSfpFourN	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110
pkASfpCpuFanX	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.49
OCT pkASfpCpuFan	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.49.1	OCTET STRING	read-only	rpm of cpu fan. Example: 1025
pkASfpSysFan1X	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.50
OCT pkASfpSysFan1	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.50.1	OCTET STRING	read-only	rpm of system fan 1
pkASfpSysFan2X	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.51
OCT pkASfpSysFan2	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.51.1	OCTET STRING	read-only	rpm of system fan 2
pkASfpSysFan3X	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.52
OCT pkASfpSysFan3	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.52.1	OCTET STRING	read-only	rpm of system fan 3
pkASfpCpuFanStatusX	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.53
OCT pkASfpCpuFanStatus	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.53.1	OCTET STRING	read-only	0 if cpu fan ok, 1 otherwise
pkASfpSysFansStatusX	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.54
OCT pkASfpSysFansStatus	1.3.6.1.4.1.22408.1.1.2.1.4.102.97.110.54.1	OCTET STRING	read-only	0 if system fans are ok, 1 otherwise
pkSfpFourV	1.3.6.1.4.1.22408.1.1.2.1.4.118
pkSfpFourD	1.3.6.1.4.1.22408.1.1.2.1.4.118.100
pkSfpFourB	1.3.6.1.4.1.22408.1.1.2.1.4.118.100.98
pkAVdbUsagePercentX	1.3.6.1.4.1.22408.1.1.2.1.4.118.100.98.49
OCT pkAVdbUsagePercent	1.3.6.1.4.1.22408.1.1.2.1.4.118.100.98.49.1	OCTET STRING	read-only	Database usage in %. Example: 35
pkAVdbStatusX	1.3.6.1.4.1.22408.1.1.2.1.4.118.100.98.50
OCT pkAVdbStatus	1.3.6.1.4.1.22408.1.1.2.1.4.118.100.98.50.1	OCTET STRING	read-only	1 if space for db exceeds 80% usage, 0 otherwise
pkSfpFive	1.3.6.1.4.1.22408.1.1.2.1.5
pkSfpFiveL	1.3.6.1.4.1.22408.1.1.2.1.5.108
pkSfpFiveO	1.3.6.1.4.1.22408.1.1.2.1.5.108.111
pkSfpFiveA	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97
pkSfpFiveD	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100
pkASfpLoadX	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100.49
OCT pkASfpLoad	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100.49.1	OCTET STRING	read-only	Load average of the system. Intervals are 1 min, 5 min, 15 min. Values above 1.0 are possible. Example: 0.77 0.79 0.82
pkASfpLoad1mX	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100.50
OCT pkASfpLoad1m	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100.50.1	OCTET STRING	read-only	Load average of the system. Intervals is 1 min. Values above 1.0 are possible. Example: 0.77
pkASfpLoad5mX	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100.51
OCT pkASfpLoad5m	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100.51.1	OCTET STRING	read-only	Load average of the system. Intervals is 5 mins. Values above 1.0 are possible. Example: 0.79
pkASfpLoad15mX	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100.52
OCT pkASfpLoad15m	1.3.6.1.4.1.22408.1.1.2.1.5.108.111.97.100.52.1	OCTET STRING	read-only	Load average of the system. Intervals is 15 mins. Values above 1.0 are possible. Example: 0.82
pkSfpFiveR	1.3.6.1.4.1.22408.1.1.2.1.5.114
pkSfpFiveRA	1.3.6.1.4.1.22408.1.1.2.1.5.114.97
pkSfpFiveRAI	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105
pkSfpFiveRAID	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100
pkASfpRaidStatusX	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.49
OCT pkASfpRaidStatus	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.49.1	OCTET STRING	read-only	Status of RAID, 0 if clean or active, 1 otherwise
pkASfpRaidStatusStringX	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.50
OCT pkASfpRaidStatusString	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.50.1	OCTET STRING	read-only	Status of RAID as string. Example: 'clean'
pkASfpRaidTotalDevicesStringX	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.51
OCT pkASfpRaidTotalDevicesString	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.51.1	OCTET STRING	read-only	String of tool output, total number of devices in the raid. Example: 'Total Devices : 2'
pkASfpRaidTotalDevicesX	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.52
OCT pkASfpRaidTotalDevices	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.52.1	OCTET STRING	read-only	Total number of devices in the raid. Example: 2
pkASfpRaidActiveDevicesStringX	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.53
OCT pkASfpRaidActiveDevicesString	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.53.1	OCTET STRING	read-only	String of tool output, number of active devices in the raid. Example: 'Raid Devices : 2'
pkASfpRaidActiveDevicesX	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.54
OCT pkASfpRaidActiveDevices	1.3.6.1.4.1.22408.1.1.2.1.5.114.97.105.100.54.1	OCTET STRING	read-only	Number of active devices in the raid. Example: 2
pkSfpSix	1.3.6.1.4.1.22408.1.1.2.1.6
pkSfpSixM	1.3.6.1.4.1.22408.1.1.2.1.6.109
pkSfpSixA	1.3.6.1.4.1.22408.1.1.2.1.6.109.97
pkSfpSixI	1.3.6.1.4.1.22408.1.1.2.1.6.109.97.105
pkSfpSixN	1.3.6.1.4.1.22408.1.1.2.1.6.109.97.105.110
pkSfpSixT	1.3.6.1.4.1.22408.1.1.2.1.6.109.97.105.110.116
pkASfpMaintenanceStateX	1.3.6.1.4.1.22408.1.1.2.1.6.109.97.105.110.116.49
OCT pkASfpMaintenanceState	1.3.6.1.4.1.22408.1.1.2.1.6.109.97.105.110.116.49.1	OCTET STRING	read-only	MaintenanceState Status: '0' Operational, '1' Offline, '2' Maintenance
pkASfpMaintenanceStateStringX	1.3.6.1.4.1.22408.1.1.2.1.6.109.97.105.110.116.50
OCT pkASfpMaintenanceStateString	1.3.6.1.4.1.22408.1.1.2.1.6.109.97.105.110.116.50.1	OCTET STRING	read-only	MaintenanceState String. Example: 'Operational'
pkSfpSeven	1.3.6.1.4.1.22408.1.1.2.1.7
pkSfpSevenV	1.3.6.1.4.1.22408.1.1.2.1.7.118
pkSfpSevenE	1.3.6.1.4.1.22408.1.1.2.1.7.118.101
pkSfpSevenR	1.3.6.1.4.1.22408.1.1.2.1.7.118.101.114
pkSfpSevenS	1.3.6.1.4.1.22408.1.1.2.1.7.118.101.114.115
pkSfpSevenI	1.3.6.1.4.1.22408.1.1.2.1.7.118.101.114.115.105
pkSfpSevenO	1.3.6.1.4.1.22408.1.1.2.1.7.118.101.114.115.105.111
pkAVersionX	1.3.6.1.4.1.22408.1.1.2.1.7.118.101.114.115.105.111.110
OCT pkAVersion	1.3.6.1.4.1.22408.1.1.2.1.7.118.101.114.115.105.111.110.1	OCTET STRING	read-only	The software version of the operating system. Example: PrimeKeyAppliance.3.5.0
pkSfpEight	1.3.6.1.4.1.22408.1.1.2.1.8
pkSfpEightC	1.3.6.1.4.1.22408.1.1.2.1.8.99
pkSfpEightL	1.3.6.1.4.1.22408.1.1.2.1.8.99.108
pkSfpEightU	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117
pkSfpEightS	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115
pkSfpEightT	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116
pkSfpEightE	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101
pkSfpEightR	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114
pkAClusterLocalNodeIDX	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.49
OCT pkAClusterLocalNodeID	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.49.1	OCTET STRING	read-only	Cluster Local Node ID
pkAClusterSizeX	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.50
OCT pkAClusterSize	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.50.1	OCTET STRING	read-only	Cluster Size, total number of nodes
pkAClusterActiveNodesX	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.51
OCT pkAClusterActiveNodes	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.51.1	OCTET STRING	read-only	Cluster: Number of currently active nodes in the cluster
pkAClusterLocalGaleraStateX	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.52
OCT pkAClusterLocalGaleraState	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.52.1	OCTET STRING	read-only	Cluster: Local db cluster (galera) state
pkAClusterLocalGaleraStateStringX	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.53
OCT pkAClusterLocalGaleraStateString	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.53.1	OCTET STRING	read-only	Cluster: Local db cluster (galera) state as string. Example: 'Synced'
pkAClusterLTIDX	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.54
OCT pkAClusterLTID	1.3.6.1.4.1.22408.1.1.2.1.8.99.108.117.115.116.101.114.54.1	OCTET STRING	read-only	Cluster Local Last Transaction ID
pkSfpEightH	1.3.6.1.4.1.22408.1.1.2.1.8.104
pkSfpEightHE	1.3.6.1.4.1.22408.1.1.2.1.8.104.101
pkSfpEightHEA	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97
pkSfpEightHEAL	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108
pkSfpEightHEALT	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116
pkSfpEightHEALTH	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104
pkEjbca	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.101
pkAEJBCAHealthStringX	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.101.49
OCT pkAEJBCAHealthString	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.101.49.1	OCTET STRING	read-only	EJBCA Healthcheck as raw string. Example: 'ALLOK'
pkAEJBCAHealthX	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.101.50
OCT pkAEJBCAHealth	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.101.50.1	OCTET STRING	read-only	EJBCA Healthcheck returns 0 for 'ALLOK', 1 otherwise
pkSignServer	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.115
pkASignServerHealthStringX	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.115.49
OCT pkASignServerHealthString	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.115.49.1	OCTET STRING	read-only	SignServer Healthcheck as raw string. For example a multiline answer, HTML formatted HTTP Status code 503 'Service Unavailable'
pkASignServerHealthX	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.115.50
OCT pkASignServerHealth	1.3.6.1.4.1.22408.1.1.2.1.8.104.101.97.108.116.104.115.50.1	OCTET STRING	read-only	SignServer Healthcheck returns 0 for 'ALLOK', 1 otherwise
pkVhsm	1.3.6.1.4.1.22408.1.1.2.2
pkVhsmX	1.3.6.1.4.1.22408.1.1.2.2.4
pkVhsmh	1.3.6.1.4.1.22408.1.1.2.2.4.104
pkVhsms	1.3.6.1.4.1.22408.1.1.2.2.4.104.115
pkVhsmm	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109
pkAHsmStatusStringX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.49
OCT pkAHsmStatusString	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.49.1	OCTET STRING	read-only	Status of HSM as string, Example: STATUS_is_EXTERNALERASE
pkAHsmStatusEnumX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.50
OCT pkAHsmStatusEnum	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.50.1	OCTET STRING	read-only	Enum of Status of HSM
pkAHsmStatusBoolX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.51
OCT pkAHsmStatusBool	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.51.1	OCTET STRING	read-only	Status of HSM, 0 if operational, 1 otherwise
pkAHsmBatteryIntX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.52
OCT pkAHsmBatteryInt	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.52.1	OCTET STRING	read-only	Battery voltage of HSM (Internal). Example: '3.101 V'
pkAHsmBatteryIntStatusX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.53
OCT pkAHsmBatteryIntStatus	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.53.1	OCTET STRING	read-only	Battery state (Internal), 0 if ok or absent, 1 otherwise
pkAHsmSerialNumberX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.54
OCT pkAHsmSerialNumber	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.54.1	OCTET STRING	read-only	Serial Number of HSM. Example: CS620109
pkAHsmBatteryExtX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.55
OCT pkAHsmBatteryExt	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.55.1	OCTET STRING	read-only	Battery voltage of HSM (External). Example: 'External Battery: absence'
pkAHsmBatteryExtStatusX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.56
OCT pkAHsmBatteryExtStatus	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.56.1	OCTET STRING	read-only	Battery state (External), 0 if ok or absent, 1 otherwise
pkAHsmEidasAuditLogSizeX	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.57
OCT pkAHsmEidasAuditLogSize	1.3.6.1.4.1.22408.1.1.2.2.4.104.115.109.57.1	OCTET STRING	read-only	HSM Audit Log Usage/Size for the PKI Appliance eIDAS edition
pkACompliance	1.3.6.1.4.1.22408.1.1.3			This specifies the objects that are required to claim compliance.
pkAGroup	1.3.6.1.4.1.22408.1.1.4			A group of objects of PRIMEKEY APPLIANCE MIB.

RFC description

Monitors PrimeKey EJBCA Appliance system health including VM status, CPU temperature, and audit log usage.

Start monitoring PrimeKey EJBCA PKI/CA appliance, hardware security module (HSM) appliance with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download PRIMEKEY-APPLIANCE-MIB

What Is PRIMEKEY-APPLIANCE-MIB?

Supported Devices

Monitoring Examples

What Can Be Monitored

This MIB depends on

Related MIBs

RFC description