Class pki:FabricNodeSSLCertificate (CONCRETE)

Class ID:7603
Class Label: SSL Certificate for each node
Encrypted: false - Exportable: false - Persistent: true - Configurable: false - Subject to Quota: Disabled - Abstraction Layer: Logical Model - APIC NX Processing: Disabled
Write Access: [NON CONFIGURABLE]
Read Access: [admin]
Creatable/Deletable: no (see Container Mos for details)
Semantic Scope: Fabric
Semantic Scope Evaluation Rule: Parent
Monitoring Policy Source: Parent
Monitoring Flags : [ IsObservable: true, HasStats: false, HasFaults: true, HasHealth: true, HasEventRules: false ]

RN FORMAT: ifmcertnode-{nodeId}

    [1] PREFIX=ifmcertnode- PROPERTY = nodeId




DN FORMAT: 

[1] uni/fabsslcomm/ifmcertnode-{nodeId}

                

Diagram

Super Mo: pki:Definition, Container Mos: pki:FabricCommunicationEp (deletable:no),

Containers Hierarchies

top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ fabric:Topology The root for IFC topology.    ├ fabric:Pod A pod.      ├ fabric:Node The root node for the APIC.        ├ ctx:Local The local Context.          ├ ctx:Application The context application.            ├ pol:Uni Represents policy definition/resolution universe.              ├ pki:FabricCommunicationEp  IFM SSL Fabric policies                ├ pki:FabricNodeSSLCertificate  Object representing a Cisco issued x509 certificate for a node in the Fabric This object is implicitly created and cannot be deleted or exported in the configuration top:Root  This class represents the root element in the object hierarchy. All managed objects in the system are descendants of the Root element.  ├ pol:Uni Represents policy definition/resolution universe.    ├ pki:FabricCommunicationEp  IFM SSL Fabric policies      ├ pki:FabricNodeSSLCertificate  Object representing a Cisco issued x509 certificate for a node in the Fabric This object is implicitly created and cannot be deleted or exported in the configuration

Contained Hierarchy

pki:FabricNodeSSLCertificate  Object representing a Cisco issued x509 certificate for a node in the Fabric This object is implicitly created and cannot be deleted or exported in the configuration  ├ fault:Counts An immutable object that provides the number of critical, major, minor, and warning faults raised on its parent object and its subtree.  ├ fault:Delegate Exposes internal faults to the user. A fault delegate object can be defined on IFC (for example, for an endpoint group) and when the fault is raised (for example, under an endpoint policy on a switch), a fault delegate object is created on IFC under the specified object. A fault delegate object follows the lifecycle of the original fault instance object, being created, modified, or deleted based on the changes of the original fault.  ├ fault:Inst Contains detailed information of a fault. This object is attached as a child of the object on which the fault condition occurred. One instance object is created for each fault condition of the parent object. A fault instance object is identified by a fault code.    ├ aaa:RbacAnnotation  RbacAnnotation is used for capturing rbac properties of any apic object Objects can append rbacannotations as Object->RbacAnnotation which is then checked for domain eligibility    ├ tag:Annotation     ├ tag:Tag   ├ health:Inst A base class for a health score instance.(Switch only)

Inheritance

naming:NamedObject An abstract base class for an object that contains a name.  ├ pol:Obj Represents a generic policy object.    ├ pol:Def Represents self-contained policy document.      ├ pki:Definition This is an abstract class and cannot be instantiated.        ├ pki:FabricNodeSSLCertificate  Object representing a Cisco issued x509 certificate for a node in the Fabric This object is implicitly created and cannot be deleted or exported in the configuration

                pki:FabricNodeSSLCertificate:NodeCertInvalid

                

authorityKeyIdentifier

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

childAction

Type: mo:ModificationChildAction
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelChildAction

Delete or ignore. For internal use only.

data

Type: string:CharBuffer

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Information returned by or provided to the application or task.

descr

Type: naming:Descr
Primitive Type: string:Basic

Like: naming:Described:descr
Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular

Specifies a description of the policy definition.

dn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelDn

A tag or metadata is a non-hierarchical keyword or term assigned to the fabric module.

expiredCertificate

Type: scalar:Bool

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Current system time is either before or after certificate validity window

invalidIssuer

Type: scalar:Bool

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Invalid issuer

invalidSigningCAForCertificate

Type: scalar:Bool

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Invalid Signing CA for certificate

invalidSubjectFormat

Type: scalar:Bool

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

Invalid Subject line format

issuer

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

keySize

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

x509 certificate public key size - for e.g. 1024 bits

lcOwn

Type: mo:Owner
Primitive Type: scalar:Enum8

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A value that indicates how this object was created. For internal use only.

message

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The contents of the informational banner to be displayed before user login authentication.

modTs

Type: mo:TStamp
Primitive Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The time when this object was last modified.

monPolDn

Type: reference:BinRef

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The monitoring policy attached to this observable object.

name

Type: naming:Name
Primitive Type: string:Basic

Overrides:pol:Obj:name  |  naming:NamedObject:name

Units: null
Encrypted: false
Access: create
Category: TopLevelRegular

nameAlias

Type: naming:NameAlias
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular

NO COMMENTS

nodeId

Type: scalar:Uint16

Units: null
Encrypted: false
Naming Property -- [NAMING RULES]
Access: naming
Category: TopLevelRegular

The ID of the APIC, leaf, or spine.

nodeType

Type: pki:CertificateReferenceType
Primitive Type: scalar:Enum16

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

ownerKey

Type: naming:Descr
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular

The key for enabling clients to own their data for entity correlation.

ownerTag

Type: naming:Descr
Primitive Type: string:Basic

Units: null
Encrypted: false
Access: admin
Category: TopLevelRegular

A tag for enabling clients to add their own data. For example, to indicate who created this object.

publicKeyAlgorithm

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

x509 certificate signature algorithm - for e.g. rsaEncryption

rn

Type: reference:BinRN

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRn

Identifies an object from its siblings within the context of its parent object. The distinguished name contains a sequence of relative names.

serialNumber

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

signatureAlgorithm

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

x509 certificate signature algorithm - for e.g. sha1WithRSAEncryption

status

Type: mo:ModificationStatus
Primitive Type: scalar:Bitmask32

Units: null
Encrypted: false
Access: implicit
Category: TopLevelStatus

The upgrade status. This property is for internal use only.

subject

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

A short free-form description of a fault.

subjectKeyIdentifier

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

X509v3 Subject Key Identifier: E9:C6:31:FC:E1:96:06:9D:E0:22:BC:27:0C:36:71:99:1B:5E:6B:9E X509v3 Authority Key Identifier: keyid:D0:C5:22:26:AB:4F:46:60:EC:AE:05:91:C7:DC:5A:D1:B0:47:F7:6C

validCertificate

Type: scalar:Bool

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The following are boolean properties that will be used to trigger fault rules Validation of certificate contents indicate this certificate will fail if used for SSL IFM in strict mode

validityNotAfter

Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

validityNotBefore

Type: scalar:Date

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

NO COMMENTS

version

Type: string:Basic

Units: null
Encrypted: false
Access: implicit
Category: TopLevelRegular

The version of the compatibility catalog.