Class CIM_SignedCredential
extends CIM_Credential

A SignedCredential is a credential that is cryptographically signed by a trusted Certificate Authority (CA) and issued to an authenticated entity (e.g., human user, service, etc.) called the Subject in the certificate. The public key in the certificate is cryptographically related to a private key that is held and kept private by the authenticated Subject. The certificate and its related private key can then be used for establishing trust relationships and securing communications with the Subject. Refer to the ITU/CCITT X.509 standard as an example of such certificates.

Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods


Class Hierarchy

CIM_ManagedElement
   |
   +--CIM_Credential
   |
   +--CIM_SignedCredential

Direct Known Subclasses

Class Qualifiers

NameData TypeValue
DescriptionstringA SignedCredential is a credential that is cryptographically signed by a trusted Certificate Authority (CA) and issued to an authenticated entity (e.g., human user, service, etc.) called the Subject in the certificate. The public key in the certificate is cryptographically related to a private key that is held and kept private by the authenticated Subject. The certificate and its related private key can then be used for establishing trust relationships and securing communications with the Subject. Refer to the ITU/CCITT X.509 standard as an example of such certificates.
Experimentalbooleantrue
UMLPackagePathstringCIM::User::PublicKey
Versionstring2.16.0

Class Properties

Local Class Properties

NameData TypeDefault ValueQualifiers
NameData TypeValue
AltSubjectstring
DescriptionstringAlternate subject identifier for the Certificate.
MaxLenuint32256
BasicConstraintsuint16
DescriptionstringAn X.509 certificate may contain an optional extension that identifies whether the subject of the certificate is a certificate authority (CA). If the subject is a CA, this property defines the number of certificates that may follow this certificate in a certification chain.
ExtendedKeyUsagestring
DescriptionstringThis extension indicates one or more purposes for which the certified public key may be used, in addition to or in place of the basic purposes indicated in the key usage extension.
InstanceIDstring
DescriptionstringWithin the scope of the instantiating Namespace, InstanceID opaquely and uniquely identifies an instance of this class. In order to ensure uniqueness within the NameSpace, the value of InstanceID SHOULD be constructed using the following 'preferred' algorithm: <OrgID>:<LocalID> Where <OrgID> and <LocalID> are separated by a colon ':', and where <OrgID> MUST include a copyrighted, trademarked or otherwise unique name that is owned by the business entity creating/defining the InstanceID, or is a registered ID that is assigned to the business entity by a recognized global authority. (This is similar to the <Schema Name>_<Class Name> structure of Schema class names.) In addition, to ensure uniqueness, <OrgID> MUST NOT contain a colon (':'). When using this algorithm, the first colon to appear in InstanceID MUST appear between <OrgID> and <LocalID>. <LocalID> is chosen by the organizational entity and SHOULD not be re-used to identify different underlying (real-world) elements. If the above 'preferred' algorithm is not used, the defining entity MUST assure that the resultant InstanceID is not re-used across any InstanceIDs produced by this or other providers for this instance's NameSpace. For DMTF defined instances, the 'preferred' algorithm MUST be used with the <OrgID> set to 'CIM'.
Keybooleantrue
IssuerNamestring
DescriptionstringIssuer name of the certificate authority who signed the certificate.
IssuerUIDstring
DescriptionstringString that identifies the issuer of the certificate.
IsValiduint16
DescriptionstringWhether the application considers the certificate to be valid.
ValueMapstring0, 2, 3, 4..32767, 32768..65535
ValuesstringUnknown, Valid, Invalid, DMTF Reserved, Vendor Specified
KeyUsageuint16
DescriptionstringKey usage defines the purpose of the key. Key usage could include digital signing, key agreement, certificate signing, and more. The key usage is an extension to the X.509 specification.
ValueMapstring0, 2, 3, 4, 5, 6, 7, 8..32767, 32768..65535
ValuesstringUnknown, Digital Signature, Non Repudiation, Key Encipherment, Data Encipherment, Key Agreement, Key Certificate Signature, DMTF Reserved, Vendor Specified
OtherPublicKeyEncodingstring
DescriptionstringA string that describes the encoding of PublicKey when PublicKeyEncoding is set to 1 ("Other"). This property must be set to null when PublicKeyEncoding is any value other than 1.
ModelCorrespondencestringCIM_SignedCredential.PublicKeyEncoding, CIM_SignedCredential.PublicKey
PublicKeyAlgorithmuint16
DescriptionstringPublic key algorithm like RSA or DSA.
ValueMapstring0, 2, 3, 4..32767, 32768..65535
ValuesstringUnknown, RSA, DSA, DMTF Reserved, Vendor Specified
PublicKeyEncodinguint16
DescriptionstringAn enumeration defining the encoding in PublicKey. ASN.1 DER: encoded according to the Abstract Syntax Notation One (ASN.1) Distinguished Encoding Rules (DER), defined in the ITU-T X.680 series of standards. SSH mpint: encoded according to the mpint format defined in IETF RFC4251 for representation of multiple-precision integers in SSH and other network protocols.
ModelCorrespondencestringCIM_SignedCredential.PublicKey, CIM_SignedCredential.OtherPublicKeyEncoding
ValueMapstring0, 1, 2, 3, 4
ValuesstringUnknown, Other, ASN.1 DER, SSH mpint, DMTF Reserved
SerialNumberuint16
DescriptionstringUnique number that identifies this certificate.
SignatureAlgorithmNamestring
DescriptionstringAlgorithm name used to generate the signature.
SignatureAlgorithmOIDstring
DescriptionstringObject ID of the signature algorithm.
Subjectstring
DescriptionstringCertificate subject identifier.
MaxLenuint32256
SubjectUIDstring
DescriptionstringString that identifies the applicant for the certificate.
Versionstring
DescriptionstringVersion of X.509.
EncodedCertificateuint8[]
DescriptionstringThe full content of the certificate in binary form.
OctetStringbooleantrue
MD5Fingerprintsuint8[]
DescriptionstringDigital signature algorithm that verifies data integrity by creating a 128-bit message digest or fingerprint. The fingerprint is as unique to the input data.
OctetStringbooleantrue
PublicKeyuint8[]
DescriptionstringThe public key, encoded as indicated by PublicKeyEncoding.
ModelCorrespondencestringCIM_SignedCredential.OtherPublicKeyEncoding, CIM_SignedCredential.PublicKeyEncoding
OctetStringbooleantrue
SHA1Fingerprintsuint8[]
DescriptionstringSecure hashing algorithm, a cryptographic message digest algorithm used to verify data integrity by making replication of the digest or fingerprint.
OctetStringbooleantrue
Signatureuint8[]
DescriptionstringCertificate authority's identifying digest that confers validity on a certificate.
OctetStringbooleantrue
SignatureAlgorithmParametersstring[]
DescriptionstringAlgorithm parameters that are used to generate the signature that uses the TBS certificate as input.
TBSCertificateuint8[]
DescriptionstringBody of the actual certificate. It contains all the naming and the key information held in the certificate. The TBS certificate is used as an input data to the signature algorithm when the certificate is signed or verified.
OctetStringbooleantrue

Inherited Properties

NameData TypeClass Origin
CaptionstringCIM_ManagedElement
DescriptionstringCIM_ManagedElement
ElementNamestringCIM_ManagedElement
ExpiresdatetimeCIM_Credential
IssueddatetimeCIM_Credential
ValidFromdatetimeCIM_Credential

Class Methods