1<?xml version="1.0" encoding="UTF-8"?> 2<!----> 3<!--################################################################################ --> 4<!--# Redfish Schema: Certificate v1.8.1 --> 5<!--# --> 6<!--# For a detailed change log, see the README file contained in the DSP8010 bundle, --> 7<!--# available at http://www.dmtf.org/standards/redfish --> 8<!--# Copyright 2014-2023 DMTF. --> 9<!--# For the full DMTF copyright policy, see http://www.dmtf.org/about/policies/copyright --> 10<!--################################################################################ --> 11<!----> 12<edmx:Edmx xmlns:edmx="http://docs.oasis-open.org/odata/ns/edmx" Version="4.0"> 13 14 <edmx:Reference Uri="http://docs.oasis-open.org/odata/odata/v4.0/errata03/csd01/complete/vocabularies/Org.OData.Core.V1.xml"> 15 <edmx:Include Namespace="Org.OData.Core.V1" Alias="OData"/> 16 </edmx:Reference> 17 <edmx:Reference Uri="http://docs.oasis-open.org/odata/odata/v4.0/errata03/csd01/complete/vocabularies/Org.OData.Capabilities.V1.xml"> 18 <edmx:Include Namespace="Org.OData.Capabilities.V1" Alias="Capabilities"/> 19 </edmx:Reference> 20 <edmx:Reference Uri="http://redfish.dmtf.org/schemas/v1/Resource_v1.xml"> 21 <edmx:Include Namespace="Resource"/> 22 <edmx:Include Namespace="Resource.v1_0_0"/> 23 </edmx:Reference> 24 <edmx:Reference Uri="http://redfish.dmtf.org/schemas/v1/RedfishExtensions_v1.xml"> 25 <edmx:Include Namespace="RedfishExtensions.v1_0_0" Alias="Redfish"/> 26 <edmx:Include Namespace="Validation.v1_0_0" Alias="Validation"/> 27 </edmx:Reference> 28 29 <edmx:DataServices> 30 31 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate"> 32 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 33 34 <EntityType Name="Certificate" BaseType="Resource.v1_0_0.Resource" Abstract="true"> 35 <Annotation Term="OData.Description" String="The Certificate schema describes a certificate that proves the identity of a component, account, or service."/> 36 <Annotation Term="OData.LongDescription" String="This resource shall represent a certificate for a Redfish implementation."/> 37 <Annotation Term="Capabilities.InsertRestrictions"> 38 <Record> 39 <PropertyValue Property="Insertable" Bool="false"/> 40 </Record> 41 </Annotation> 42 <Annotation Term="Capabilities.UpdateRestrictions"> 43 <Record> 44 <PropertyValue Property="Updatable" Bool="true"/> 45 </Record> 46 </Annotation> 47 <Annotation Term="Capabilities.DeleteRestrictions"> 48 <Record> 49 <PropertyValue Property="Deletable" Bool="true"/> 50 <Annotation Term="OData.Description" String="Use the DELETE operation to remove certificates."/> 51 </Record> 52 </Annotation> 53 <Annotation Term="Redfish.Uris"> 54 <Collection> 55 <String>/redfish/v1/AccountService/Accounts/{ManagerAccountId}/Certificates/{CertificateId}</String> 56 <String>/redfish/v1/AccountService/ActiveDirectory/Certificates/{CertificateId}</String> 57 <String>/redfish/v1/AccountService/LDAP/Certificates/{CertificateId}</String> 58 <String>/redfish/v1/AccountService/ExternalAccountProviders/{ExternalAccountProviderId}/Certificates/{CertificateId}</String> 59 <String>/redfish/v1/AccountService/MultiFactorAuth/ClientCertificate/Certificates/{CertificateId}</String> 60 <String>/redfish/v1/AccountService/MultiFactorAuth/SecurID/Certificates/{CertificateId}</String> 61 <String>/redfish/v1/Managers/{ManagerId}/RemoteAccountService/Accounts/{ManagerAccountId}/Certificates/{CertificateId}</String> 62 <String>/redfish/v1/Managers/{ManagerId}/RemoteAccountService/ActiveDirectory/Certificates/{CertificateId}</String> 63 <String>/redfish/v1/Managers/{ManagerId}/RemoteAccountService/LDAP/Certificates/{CertificateId}</String> 64 <String>/redfish/v1/Managers/{ManagerId}/RemoteAccountService/ExternalAccountProviders/{ExternalAccountProviderId}/Certificates/{CertificateId}</String> 65 <String>/redfish/v1/Managers/{ManagerId}/RemoteAccountService/MultiFactorAuth/ClientCertificate/Certificates/{CertificateId}</String> 66 <String>/redfish/v1/Managers/{ManagerId}/RemoteAccountService/MultiFactorAuth/SecurID/Certificates/{CertificateId}</String> 67 <String>/redfish/v1/Managers/{ManagerId}/NetworkProtocol/HTTPS/Certificates/{CertificateId}</String> 68 <String>/redfish/v1/Systems/{ComputerSystemId}/Boot/Certificates/{CertificateId}</String> 69 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Boot/Certificates/{CertificateId}</String> 70 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Boot/Certificates/{CertificateId}</String> 71 <String>/redfish/v1/Systems/{ComputerSystemId}/SecureBoot/SecureBootDatabases/{DatabaseId}/Certificates/{CertificateId}</String> 72 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/SecureBoot/SecureBootDatabases/{DatabaseId}/Certificates/{CertificateId}</String> 73 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/SecureBoot/SecureBootDatabases/{DatabaseId}/Certificates/{CertificateId}</String> 74 <String>/redfish/v1/EventService/Subscriptions/{EventDestinationId}/Certificates/{CertificateId}</String> 75 <String>/redfish/v1/EventService/Subscriptions/{EventDestinationId}/ClientCertificates/{CertificateId}</String> 76 <String>/redfish/v1/Systems/{ComputerSystemId}/Certificates/{CertificateId}</String> 77 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Certificates/{CertificateId}</String> 78 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Certificates/{CertificateId}</String> 79 <String>/redfish/v1/Systems/{ComputerSystemId}/Memory/{MemoryId}/Certificates/{CertificateId}</String> 80 <String>/redfish/v1/Chassis/{ChassisId}/Memory/{MemoryId}/Certificates/{CertificateId}</String> 81 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Memory/{MemoryId}/Certificates/{CertificateId}</String> 82 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Memory/{MemoryId}/Certificates/{CertificateId}</String> 83 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Memory/{MemoryId}/Certificates/{CertificateId}</String> 84 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Memory/{MemoryId}/Certificates/{CertificateId}</String> 85 <String>/redfish/v1/Systems/{ComputerSystemId}/Processors/{ProcessorId}/Certificates/{CertificateId}</String> 86 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Processors/{ProcessorId}/Certificates/{CertificateId}</String> 87 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Processors/{ProcessorId}/Certificates/{CertificateId}</String> 88 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Processors/{ProcessorId}/Certificates/{CertificateId}</String> 89 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Processors/{ProcessorId}/Certificates/{CertificateId}</String> 90 <String>/redfish/v1/Storage/{StorageId}/StorageControllers/{StorageControllerId}/Certificates/{CertificateId}</String> 91 <String>/redfish/v1/Systems/{ComputerSystemId}/Storage/{StorageId}/StorageControllers/{StorageControllerId}/Certificates/{CertificateId}</String> 92 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Storage/{StorageId}/StorageControllers/{StorageControllerId}/Certificates/{CertificateId}</String> 93 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Storage/{StorageId}/StorageControllers/{StorageControllerId}/Certificates/{CertificateId}</String> 94 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Storage/{StorageId}/StorageControllers/{StorageControllerId}/Certificates/{CertificateId}</String> 95 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Storage/{StorageId}/StorageControllers/{StorageControllerId}/Certificates/{CertificateId}</String> 96 <String>/redfish/v1/Storage/{StorageId}/Controllers/{StorageControllerId}/Certificates/{CertificateId}</String> 97 <String>/redfish/v1/Systems/{ComputerSystemId}/Storage/{StorageId}/Controllers/{StorageControllerId}/Certificates/{CertificateId}</String> 98 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Storage/{StorageId}/Controllers/{StorageControllerId}/Certificates/{CertificateId}</String> 99 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Storage/{StorageId}/Controllers/{StorageControllerId}/Certificates/{CertificateId}</String> 100 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Storage/{StorageId}/Controllers/{StorageControllerId}/Certificates/{CertificateId}</String> 101 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Storage/{StorageId}/Controllers/{StorageControllerId}/Certificates/{CertificateId}</String> 102 <String>/redfish/v1/Fabrics/{FabricId}/Switches/{SwitchId}/Certificates/{CertificateId}</String> 103 <String>/redfish/v1/Chassis/{ChassisId}/Certificates/{CertificateId}</String> 104 <String>/redfish/v1/Systems/{ComputerSystemId}/Storage/{StorageId}/Drives/{DriveId}/Certificates/{CertificateId}</String> 105 <String>/redfish/v1/Chassis/{ChassisId}/Drives/{DriveId}/Certificates/{CertificateId}</String> 106 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Storage/{StorageId}/Drives/{DriveId}/Certificates/{CertificateId}</String> 107 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Drives/{DriveId}/Certificates/{CertificateId}</String> 108 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Storage/{StorageId}/Drives/{DriveId}/Certificates/{CertificateId}</String> 109 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Storage/{StorageId}/Drives/{DriveId}/Certificates/{CertificateId}</String> 110 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Drives/{DriveId}/Certificates/{CertificateId}</String> 111 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/Storage/{StorageId}/Drives/{DriveId}/Certificates/{CertificateId}</String> 112 <String>/redfish/v1/Chassis/{ChassisId}/NetworkAdapters/{NetworkAdapterId}/Certificates/{CertificateId}</String> 113 <String>/redfish/v1/Systems/{ComputerSystemId}/VirtualMedia/{VirtualMediaId}/Certificates/{CertificateId}</String> 114 <String>/redfish/v1/Systems/{ComputerSystemId}/VirtualMedia/{VirtualMediaId}/ClientCertificates/{CertificateId}</String> 115 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/VirtualMedia/{VirtualMediaId}/Certificates/{CertificateId}</String> 116 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/VirtualMedia/{VirtualMediaId}/ClientCertificates/{CertificateId}</String> 117 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/VirtualMedia/{VirtualMediaId}/Certificates/{CertificateId}</String> 118 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/VirtualMedia/{VirtualMediaId}/ClientCertificates/{CertificateId}</String> 119 <String>/redfish/v1/UpdateService/RemoteServerCertificates/{CertificateId}</String> 120 <String>/redfish/v1/UpdateService/ClientCertificates/{CertificateId}</String> 121 <String>/redfish/v1/Managers/{ManagerId}/Certificates/{CertificateId}</String> 122 <String>/redfish/v1/Systems/{ComputerSystemId}/KeyManagement/KMIPCertificates/{CertificateId}</String> 123 <String>/redfish/v1/CompositionService/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/KeyManagement/KMIPCertificates/{CertificateId}</String> 124 <String>/redfish/v1/ResourceBlocks/{ResourceBlockId}/Systems/{ComputerSystemId}/KeyManagement/KMIPCertificates/{CertificateId}</String> 125 <String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/TrustedCertificates/{CertificateId}</String> 126 <String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/SPDM/RevokedCertificates/{CertificateId}</String> 127 <String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/TLS/Client/TrustedCertificates/{CertificateId}</String> 128 <String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/TLS/Client/RevokedCertificates/{CertificateId}</String> 129 <String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/TLS/Server/TrustedCertificates/{CertificateId}</String> 130 <String>/redfish/v1/Managers/{ManagerId}/SecurityPolicy/TLS/Server/RevokedCertificates/{CertificateId}</String> 131 <String>/redfish/v1/Chassis/{ChassisId}/TrustedComponents/{TrustedComponentId}/Certificates/{CertificateId}</String> 132 <String>/redfish/v1/AccountService/OutboundConnections/{OutboundConnectionId}/Certificates/{CertificateId}</String> 133 <String>/redfish/v1/AccountService/OutboundConnections/{OutboundConnectionId}/ClientCertificates/{CertificateId}</String> 134 </Collection> 135 </Annotation> 136 </EntityType> 137 138 <EnumType Name="CertificateType"> 139 <Member Name="PEM"> 140 <Annotation Term="OData.Description" String="A Privacy Enhanced Mail (PEM)-encoded single certificate."/> 141 <Annotation Term="OData.LongDescription" String="This value shall indicate the format of the certificate shall contain a Privacy Enhanced Mail (PEM)-encoded string, containing RFC5280-defined structures, representing a single certificate."/> 142 </Member> 143 <Member Name="PEMchain"> 144 <Annotation Term="OData.Description" String="A Privacy Enhanced Mail (PEM)-encoded certificate chain."/> 145 <Annotation Term="OData.LongDescription" String="This value shall indicate the format of the certificate shall contain a Privacy Enhanced Mail (PEM)-encoded string, containing RFC5280-defined structures, representing a certificate chain."/> 146 <Annotation Term="Redfish.Revisions"> 147 <Collection> 148 <Record> 149 <PropertyValue Property="Kind" EnumMember="Redfish.RevisionKind/Added"/> 150 <PropertyValue Property="Version" String="v1_4_0"/> 151 </Record> 152 </Collection> 153 </Annotation> 154 </Member> 155 <Member Name="PKCS7"> 156 <Annotation Term="OData.Description" String="A Privacy Enhanced Mail (PEM)-encoded PKCS7 certificate."/> 157 <Annotation Term="OData.LongDescription" String="The format of the certificate shall contain a Privacy Enhanced Mail (PEM)-encoded string, containing RFC5280-defined and RFC2315-defined structures. The service can discard additional certificates or other data in the structure."/> 158 </Member> 159 </EnumType> 160 161 <EnumType Name="KeyUsage"> 162 <Annotation Term="OData.Description" String="The usages of a key contained within a certificate."/> 163 <Annotation Term="OData.LongDescription" String="This type shall describe the usages of a key within a certificate, as specified by the 'Key Usage' and 'Extended Key Usage' definitions in RFC5280."/> 164 <Member Name="DigitalSignature"> 165 <Annotation Term="OData.Description" String="Verifies digital signatures, other than signatures on certificates and CRLs."/> 166 </Member> 167 <Member Name="NonRepudiation"> 168 <Annotation Term="OData.Description" String="Verifies digital signatures, other than signatures on certificates and CRLs, and provides a non-repudiation service that protects against the signing entity falsely denying some action."/> 169 </Member> 170 <Member Name="KeyEncipherment"> 171 <Annotation Term="OData.Description" String="Enciphers private or secret keys."/> 172 </Member> 173 <Member Name="DataEncipherment"> 174 <Annotation Term="OData.Description" String="Directly enciphers raw user data without an intermediate symmetric cipher."/> 175 </Member> 176 <Member Name="KeyAgreement"> 177 <Annotation Term="OData.Description" String="Key agreement."/> 178 </Member> 179 <Member Name="KeyCertSign"> 180 <Annotation Term="OData.Description" String="Verifies signatures on public key certificates."/> 181 </Member> 182 <Member Name="CRLSigning"> 183 <Annotation Term="OData.Description" String="Verifies signatures on certificate revocation lists (CRLs)."/> 184 </Member> 185 <Member Name="EncipherOnly"> 186 <Annotation Term="OData.Description" String="Enciphers data while performing a key agreement."/> 187 </Member> 188 <Member Name="DecipherOnly"> 189 <Annotation Term="OData.Description" String="Deciphers data while performing a key agreement."/> 190 </Member> 191 <Member Name="ServerAuthentication"> 192 <Annotation Term="OData.Description" String="TLS WWW server authentication."/> 193 </Member> 194 <Member Name="ClientAuthentication"> 195 <Annotation Term="OData.Description" String="TLS WWW client authentication."/> 196 </Member> 197 <Member Name="CodeSigning"> 198 <Annotation Term="OData.Description" String="Signs downloadable executable code."/> 199 </Member> 200 <Member Name="EmailProtection"> 201 <Annotation Term="OData.Description" String="Email protection."/> 202 </Member> 203 <Member Name="Timestamping"> 204 <Annotation Term="OData.Description" String="Binds the hash of an object to a time."/> 205 </Member> 206 <Member Name="OCSPSigning"> 207 <Annotation Term="OData.Description" String="Signs OCSP responses."/> 208 </Member> 209 </EnumType> 210 211 <Action Name="Rekey" IsBound="true"> 212 <Annotation Term="OData.Description" String="This action generates a new key-pair for a certificate and produces a certificate signing request."/> 213 <Annotation Term="OData.LongDescription" String="This action shall use the certificate data to generate a new key-pair for a certificate. The response shall contain a signing request that a certificate authority (CA) will sign. The service should retain the private key that generated this request for installation of the certificate. The private key should not be part of the response. The private key should not be part of the response."/> 214 <Parameter Name="Certificate" Type="Certificate.v1_0_0.Actions"/> 215 <Parameter Name="KeyPairAlgorithm" Type="Edm.String"> 216 <Annotation Term="OData.Description" String="The type of key-pair for use with signing algorithms."/> 217 <Annotation Term="OData.LongDescription" String="This parameter shall contain the type of key-pair for use with signing algorithms. The allowable values for this parameter shall be the strings in the 'Algorithm Name' field of the 'TPM_ALG_ID Constants' table within the 'Trusted Computing Group Algorithm Registry'."/> 218 </Parameter> 219 <Parameter Name="KeyBitLength" Type="Edm.Int64"> 220 <Annotation Term="OData.Description" String="The length of the key, in bits, if needed based on the KeyPairAlgorithm parameter value."/> 221 <Annotation Term="OData.LongDescription" String="This parameter shall contain the length of the key, in bits, if needed based on the KeyPairAlgorithm parameter value."/> 222 </Parameter> 223 <Parameter Name="KeyCurveId" Type="Edm.String"> 224 <Annotation Term="OData.Description" String="The curve ID to use with the key, if needed based on the KeyPairAlgorithm parameter value."/> 225 <Annotation Term="OData.LongDescription" String="This parameter shall contain the curve ID to use with the key, if needed based on the KeyPairAlgorithm parameter value. The allowable values for this parameter shall be the strings in the 'Name' field of the 'TPM_ECC_CURVE Constants' table within the 'Trusted Computing Group Algorithm Registry'."/> 226 </Parameter> 227 <Parameter Name="ChallengePassword" Type="Edm.String"> 228 <Annotation Term="OData.Description" String="The challenge password to apply to the certificate for revocation requests."/> 229 <Annotation Term="OData.LongDescription" String="This property shall contain the challenge password to apply to the certificate for revocation requests as defined by the RFC2985 'challengePassword' attribute."/> 230 </Parameter> 231 <ReturnType Type="Certificate.v1_1_0.RekeyResponse" Nullable="false"/> 232 <Annotation Term="Redfish.Revisions"> 233 <Collection> 234 <Record> 235 <PropertyValue Property="Kind" EnumMember="Redfish.RevisionKind/Added"/> 236 <PropertyValue Property="Version" String="v1_1_0"/> 237 </Record> 238 </Collection> 239 </Annotation> 240 </Action> 241 242 <Action Name="Renew" IsBound="true"> 243 <Annotation Term="OData.Description" String="This action generates a certificate signing request by using the existing information and key-pair of the certificate."/> 244 <Annotation Term="OData.LongDescription" String="This action shall generate a certificate signing request using the existing information and key-pair of the certificate. The response shall contain a signing request that a certificate authority (CA) will sign. The service should retain the private key that this request generates for when the certificate is installed. The private key should not be part of the response."/> 245 <Parameter Name="Certificate" Type="Certificate.v1_0_0.Actions"/> 246 <Parameter Name="ChallengePassword" Type="Edm.String"> 247 <Annotation Term="OData.Description" String="The challenge password to apply to the certificate for revocation requests."/> 248 <Annotation Term="OData.LongDescription" String="This property shall contain the challenge password to apply to the certificate for revocation requests as defined by the RFC2985 'challengePassword' attribute."/> 249 </Parameter> 250 <ReturnType Type="Certificate.v1_1_0.RenewResponse" Nullable="false"/> 251 <Annotation Term="Redfish.Revisions"> 252 <Collection> 253 <Record> 254 <PropertyValue Property="Kind" EnumMember="Redfish.RevisionKind/Added"/> 255 <PropertyValue Property="Version" String="v1_1_0"/> 256 </Record> 257 </Collection> 258 </Annotation> 259 </Action> 260 </Schema> 261 262 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_0_0"> 263 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 264 <Annotation Term="Redfish.Release" String="2018.3"/> 265 266 <EntityType Name="Certificate" BaseType="Certificate.Certificate"> 267 <Property Name="CertificateString" Type="Edm.String"> 268 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 269 <Annotation Term="OData.Description" String="The string for the certificate."/> 270 <Annotation Term="OData.LongDescription" String="This property shall contain the certificate, and the format shall follow the requirements specified by the CertificateType property value. If the certificate contains any private keys, they shall be removed from the string in responses. If the service does not know the private key for the certificate and is needed to use the certificate, the client shall provide the private key as part of the string in the POST request."/> 271 <Annotation Term="Redfish.RequiredOnCreate"/> 272 </Property> 273 <Property Name="CertificateType" Type="Certificate.CertificateType"> 274 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 275 <Annotation Term="OData.Description" String="The format of the certificate."/> 276 <Annotation Term="OData.LongDescription" String="This property shall contain the format type for the certificate."/> 277 <Annotation Term="Redfish.RequiredOnCreate"/> 278 </Property> 279 <Property Name="Issuer" Type="Certificate.v1_0_0.Identifier" Nullable="false"> 280 <Annotation Term="OData.Description" String="The issuer of the certificate."/> 281 <Annotation Term="OData.LongDescription" String="This property shall contain an object containing information about the issuer of the certificate."/> 282 </Property> 283 <Property Name="Subject" Type="Certificate.v1_0_0.Identifier" Nullable="false"> 284 <Annotation Term="OData.Description" String="The subject of the certificate."/> 285 <Annotation Term="OData.LongDescription" String="This property shall contain an object containing information about the subject of the certificate."/> 286 </Property> 287 <Property Name="ValidNotBefore" Type="Edm.DateTimeOffset" Nullable="false"> 288 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 289 <Annotation Term="OData.Description" String="The date when the certificate becomes valid."/> 290 <Annotation Term="OData.LongDescription" String="This property shall contain the date when the certificate validity period begins."/> 291 </Property> 292 <Property Name="ValidNotAfter" Type="Edm.DateTimeOffset" Nullable="false"> 293 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 294 <Annotation Term="OData.Description" String="The date when the certificate is no longer valid."/> 295 <Annotation Term="OData.LongDescription" String="This property shall contain the date when the certificate validity period ends."/> 296 </Property> 297 <Property Name="KeyUsage" Type="Collection(Certificate.KeyUsage)"> 298 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 299 <Annotation Term="OData.Description" String="The key usage extension, which defines the purpose of the public keys in this certificate."/> 300 <Annotation Term="OData.LongDescription" String="This property shall contain the key usage extension, which defines the purpose of the public keys in this certificate."/> 301 </Property> 302 303 <Property Name="Actions" Type="Certificate.v1_0_0.Actions" Nullable="false"> 304 <Annotation Term="OData.Description" String="The available actions for this resource."/> 305 <Annotation Term="OData.LongDescription" String="This property shall contain the available actions for this resource."/> 306 </Property> 307 </EntityType> 308 309 <ComplexType Name="Identifier"> 310 <Annotation Term="OData.AdditionalProperties" Bool="false"/> 311 <Annotation Term="OData.Description" String="The identifier information about a certificate."/> 312 <Annotation Term="OData.LongDescription" String="This type shall contain the properties that identifies the issuer or subject of a certificate."/> 313 <Property Name="CommonName" Type="Edm.String" Nullable="false"> 314 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 315 <Annotation Term="OData.Description" String="The common name of the entity."/> 316 <Annotation Term="OData.LongDescription" String="This property shall contain the common name of the entity, as defined by the RFC5280 'commonName' attribute."/> 317 </Property> 318 <Property Name="Organization" Type="Edm.String" Nullable="false"> 319 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 320 <Annotation Term="OData.Description" String="The name of the organization of the entity."/> 321 <Annotation Term="OData.LongDescription" String="This property shall contain the name of the organization of the entity, as defined by the RFC5280 'organizationName' attribute."/> 322 </Property> 323 <Property Name="OrganizationalUnit" Type="Edm.String" Nullable="false"> 324 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 325 <Annotation Term="OData.Description" String="The name of the unit or division of the organization of the entity."/> 326 <Annotation Term="OData.LongDescription" String="This property shall contain the name of the unit or division of the organization of the entity, as defined by the RFC5280 'organizationalUnitName' attribute."/> 327 </Property> 328 <Property Name="City" Type="Edm.String" Nullable="false"> 329 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 330 <Annotation Term="OData.Description" String="The city or locality of the organization of the entity."/> 331 <Annotation Term="OData.LongDescription" String="This property shall contain the city or locality of the organization of the entity, as defined by the RFC5280 'localityName' attribute."/> 332 </Property> 333 <Property Name="State" Type="Edm.String" Nullable="false"> 334 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 335 <Annotation Term="OData.Description" String="The state, province, or region of the organization of the entity."/> 336 <Annotation Term="OData.LongDescription" String="This property shall contain the state, province, or region of the organization of the entity, as defined by the RFC5280 'stateOrProvinceName' attribute."/> 337 </Property> 338 <Property Name="Country" Type="Edm.String" Nullable="false"> 339 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 340 <Annotation Term="OData.Description" String="The country of the organization of the entity."/> 341 <Annotation Term="OData.LongDescription" String="This property shall contain the two-letter ISO code for the country of the organization of the entity, as defined by the RFC5280 'countryName' attribute."/> 342 </Property> 343 <Property Name="Email" Type="Edm.String"> 344 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 345 <Annotation Term="OData.Description" String="The email address of the contact within the organization of the entity."/> 346 <Annotation Term="OData.LongDescription" String="This property shall contain the email address of the contact within the organization of the entity, as defined by the RFC2985 'emailAddress' attribute."/> 347 </Property> 348 </ComplexType> 349 350 <ComplexType Name="Actions"> 351 <Annotation Term="OData.AdditionalProperties" Bool="false"/> 352 <Annotation Term="OData.Description" String="The available actions for this resource."/> 353 <Annotation Term="OData.LongDescription" String="This type shall contain the available actions for this resource."/> 354 <Property Name="Oem" Type="Certificate.v1_0_0.OemActions" Nullable="false"> 355 <Annotation Term="OData.Description" String="The available OEM-specific actions for this resource."/> 356 <Annotation Term="OData.LongDescription" String="This property shall contain the available OEM-specific actions for this resource."/> 357 </Property> 358 </ComplexType> 359 360 <ComplexType Name="OemActions"> 361 <Annotation Term="OData.AdditionalProperties" Bool="true"/> 362 <Annotation Term="OData.Description" String="The available OEM-specific actions for this resource."/> 363 <Annotation Term="OData.LongDescription" String="This type shall contain the available OEM-specific actions for this resource."/> 364 </ComplexType> 365 </Schema> 366 367 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_0_1"> 368 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 369 <Annotation Term="OData.Description" String="This version was created to force the regeneration of JSON Schema so that URI properties use the uri-reference format."/> 370 <EntityType Name="Certificate" BaseType="Certificate.v1_0_0.Certificate"/> 371 </Schema> 372 373 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_0_2"> 374 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 375 <Annotation Term="OData.Description" String="This version was created to update the CertificateString description. It was also created to update descriptions that this schema defines."/> 376 <EntityType Name="Certificate" BaseType="Certificate.v1_0_1.Certificate"/> 377 </Schema> 378 379 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_0_3"> 380 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 381 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 382 <EntityType Name="Certificate" BaseType="Certificate.v1_0_2.Certificate"/> 383 </Schema> 384 385 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_0_4"> 386 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 387 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 388 <EntityType Name="Certificate" BaseType="Certificate.v1_0_3.Certificate"/> 389 </Schema> 390 391 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_0_5"> 392 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 393 <Annotation Term="OData.Description" String="This version was created to update descriptions to reference attributes defined in RFC2985 and RFC5280."/> 394 <EntityType Name="Certificate" BaseType="Certificate.v1_0_4.Certificate"/> 395 </Schema> 396 397 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_0_6"> 398 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 399 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 400 <EntityType Name="Certificate" BaseType="Certificate.v1_0_5.Certificate"/> 401 </Schema> 402 403 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_1_0"> 404 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 405 <Annotation Term="Redfish.Release" String="2019.1"/> 406 <Annotation Term="OData.Description" String="This version was created to add the Renew and Rekey actions."/> 407 <EntityType Name="Certificate" BaseType="Certificate.v1_0_1.Certificate"/> 408 409 <ComplexType Name="RekeyResponse"> 410 <Annotation Term="OData.AdditionalProperties" Bool="false"/> 411 <Annotation Term="OData.Description" String="The response body for the Rekey action."/> 412 <Annotation Term="OData.LongDescription" String="This type shall contain the properties found in the response body for the Rekey action."/> 413 <NavigationProperty Name="Certificate" Type="Certificate.Certificate" Nullable="false"> 414 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 415 <Annotation Term="OData.Description" String="The link to the certificate being rekeyed."/> 416 <Annotation Term="OData.LongDescription" String="This property shall contain a link to a resource of type Certificate that is replaced after the certificate authority (CA) signs the certificate."/> 417 <Annotation Term="Redfish.Required"/> 418 </NavigationProperty> 419 <Property Name="CSRString" Type="Edm.String" Nullable="false"> 420 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 421 <Annotation Term="OData.Description" String="The string for the certificate signing request."/> 422 <Annotation Term="OData.LongDescription" String="This property shall contain the certificate signing request as a PEM-encoded string, containing structures specified by RFC2986. The private key should not be part of the string."/> 423 <Annotation Term="Redfish.Required"/> 424 </Property> 425 </ComplexType> 426 427 <ComplexType Name="RenewResponse"> 428 <Annotation Term="OData.AdditionalProperties" Bool="false"/> 429 <Annotation Term="OData.Description" String="The response body for the Renew action."/> 430 <Annotation Term="OData.LongDescription" String="This type shall contain the properties found in the response body for the Renew action."/> 431 <NavigationProperty Name="Certificate" Type="Certificate.Certificate" Nullable="false"> 432 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 433 <Annotation Term="OData.Description" String="The link to the certificate being renewed."/> 434 <Annotation Term="OData.LongDescription" String="This property shall contain a link to a resource of type Certificate that is replaced after the certificate authority (CA) signs the certificate."/> 435 <Annotation Term="Redfish.Required"/> 436 </NavigationProperty> 437 <Property Name="CSRString" Type="Edm.String" Nullable="false"> 438 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 439 <Annotation Term="OData.Description" String="The string for the certificate signing request."/> 440 <Annotation Term="OData.LongDescription" String="This property shall contain the certificate signing request as a PEM-encoded string, containing structures specified by RFC2986. The private key should not be part of the string."/> 441 <Annotation Term="Redfish.Required"/> 442 </Property> 443 </ComplexType> 444 </Schema> 445 446 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_1_1"> 447 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 448 <Annotation Term="OData.Description" String="This version was created to update the CertificateString description. It was also created to update descriptions that this schema defines."/> 449 <EntityType Name="Certificate" BaseType="Certificate.v1_1_0.Certificate"/> 450 </Schema> 451 452 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_1_2"> 453 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 454 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 455 <EntityType Name="Certificate" BaseType="Certificate.v1_1_1.Certificate"/> 456 </Schema> 457 458 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_1_3"> 459 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 460 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 461 <EntityType Name="Certificate" BaseType="Certificate.v1_1_2.Certificate"/> 462 </Schema> 463 464 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_1_4"> 465 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 466 <Annotation Term="OData.Description" String="This version was created to update descriptions to reference attributes defined in RFC2985 and RFC5280."/> 467 <EntityType Name="Certificate" BaseType="Certificate.v1_1_3.Certificate"/> 468 </Schema> 469 470 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_1_5"> 471 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 472 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 473 <EntityType Name="Certificate" BaseType="Certificate.v1_1_4.Certificate"/> 474 </Schema> 475 476 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_2_0"> 477 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 478 <Annotation Term="Redfish.Release" String="2020.1"/> 479 480 <EntityType Name="Certificate" BaseType="Certificate.v1_1_1.Certificate"> 481 <Property Name="UefiSignatureOwner" Type="Edm.Guid"> 482 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 483 <Annotation Term="OData.Description" String="The UEFI signature owner for this certificate."/> 484 <Annotation Term="OData.LongDescription" String="The value of this property shall contain the GUID of the UEFI signature owner for this certificate as defined by the UEFI Specification. This property shall only be present for certificates managed by UEFI."/> 485 </Property> 486 </EntityType> 487 </Schema> 488 489 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_2_1"> 490 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 491 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 492 <EntityType Name="Certificate" BaseType="Certificate.v1_2_0.Certificate"/> 493 </Schema> 494 495 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_2_2"> 496 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 497 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 498 <EntityType Name="Certificate" BaseType="Certificate.v1_2_1.Certificate"/> 499 </Schema> 500 501 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_2_3"> 502 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 503 <Annotation Term="OData.Description" String="This version was created to clarify the usage of UefiSignatureOwner for all certificates managed by UEFI."/> 504 <EntityType Name="Certificate" BaseType="Certificate.v1_2_2.Certificate"/> 505 </Schema> 506 507 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_2_4"> 508 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 509 <Annotation Term="OData.Description" String="This version was created to update descriptions to reference attributes defined in RFC2985 and RFC5280."/> 510 <EntityType Name="Certificate" BaseType="Certificate.v1_2_3.Certificate"/> 511 </Schema> 512 513 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_2_5"> 514 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 515 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 516 <EntityType Name="Certificate" BaseType="Certificate.v1_2_4.Certificate"/> 517 </Schema> 518 519 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_3_0"> 520 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 521 <Annotation Term="Redfish.Release" String="2021.1"/> 522 523 <EntityType Name="Certificate" BaseType="Certificate.v1_2_3.Certificate"> 524 <Property Name="SerialNumber" Type="Edm.String" Nullable="false"> 525 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 526 <Annotation Term="OData.Description" String="The serial number of the certificate."/> 527 <Annotation Term="OData.LongDescription" String="The value of this property shall be a string containing the ASCII representation of the serial number of the certificate, as defined by the RFC5280 'serialNumber' field."/> 528 <Annotation Term="Validation.Pattern" String="^([0-9A-Fa-f]{2}:){0,}([0-9A-Fa-f]{2})$"/> 529 </Property> 530 <Property Name="Fingerprint" Type="Edm.String" Nullable="false"> 531 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 532 <Annotation Term="OData.Description" String="The fingerprint of the certificate."/> 533 <Annotation Term="OData.LongDescription" String="The value of this property shall be a string containing the ASCII representation of the fingerprint of the certificate. The hash algorithm used to generate this fingerprint shall be specified by the FingerprintHashAlgorithm property."/> 534 <Annotation Term="Validation.Pattern" String="^([0-9A-Fa-f]{2}:){0,}([0-9A-Fa-f]{2})$"/> 535 </Property> 536 <Property Name="FingerprintHashAlgorithm" Type="Edm.String" Nullable="false"> 537 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 538 <Annotation Term="OData.Description" String="The hash algorithm for the fingerprint of the certificate."/> 539 <Annotation Term="OData.LongDescription" String="The value of this property shall be a string containing the hash algorithm used for generating the Fingerprint property. The value shall be one of the strings in the 'Algorithm Name' field of the 'TPM_ALG_ID Constants' table within the 'Trusted Computing Group Algorithm Registry'."/> 540 </Property> 541 <Property Name="SignatureAlgorithm" Type="Edm.String" Nullable="false"> 542 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 543 <Annotation Term="OData.Description" String="The algorithm used for creating the signature of the certificate."/> 544 <Annotation Term="OData.LongDescription" String="The value of this property shall be a string containing the algorithm used for generating the signature of the certificate, as defined by the RFC5280 'signatureAlgorithm' field. The value shall be a string representing the ASN.1 OID of the signature algorithm as defined in, but not limited to, RFC3279, RFC4055, or RFC4491."/> 545 </Property> 546 </EntityType> 547 </Schema> 548 549 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_3_1"> 550 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 551 <Annotation Term="OData.Description" String="This version was created to update descriptions to reference attributes defined in RFC2985 and RFC5280."/> 552 <EntityType Name="Certificate" BaseType="Certificate.v1_3_0.Certificate"/> 553 </Schema> 554 555 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_3_2"> 556 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 557 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 558 <EntityType Name="Certificate" BaseType="Certificate.v1_3_1.Certificate"/> 559 </Schema> 560 561 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_4_0"> 562 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 563 <Annotation Term="Redfish.Release" String="2021.2"/> 564 565 <EntityType Name="Certificate" BaseType="Certificate.v1_3_0.Certificate"> 566 <Property Name="Links" Type="Certificate.v1_4_0.Links" Nullable="false"> 567 <Annotation Term="OData.Description" String="The links to other resources that are related to this resource."/> 568 <Annotation Term="OData.LongDescription" String="This property shall contain links to resources that are related to but are not contained by, or subordinate to, this resource."/> 569 </Property> 570 <Property Name="CertificateUsageTypes" Type="Collection(Certificate.v1_4_0.CertificateUsageType)"> 571 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 572 <Annotation Term="OData.Description" String="The types or purposes for this certificate."/> 573 <Annotation Term="OData.LongDescription" String="The value of this property shall contain an array describing the types or purposes for this certificate."/> 574 </Property> 575 </EntityType> 576 577 <ComplexType Name="Links" BaseType="Resource.Links"> 578 <Annotation Term="OData.Description" String="The links to other resources that are related to this resource."/> 579 <Annotation Term="OData.LongDescription" String="This Redfish Specification-described type shall contain links to resources that are related to but are not contained by, or subordinate to, this resource."/> 580 <NavigationProperty Name="Issuer" Type="Certificate.Certificate"> 581 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/ReadWrite"/> 582 <Annotation Term="OData.Description" String="A link to the certificate of the CA that issued this certificate."/> 583 <Annotation Term="OData.LongDescription" String="This property shall contain a link to a resources of type Certificate that represents the certificate of the CA that issued this certificate."/> 584 <Annotation Term="OData.AutoExpandReferences"/> 585 </NavigationProperty> 586 <NavigationProperty Name="Subjects" Type="Collection(Certificate.Certificate)"> 587 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/ReadWrite"/> 588 <Annotation Term="OData.Description" String="An array of links to certificates that were issued by the CA that is represented by this certificate."/> 589 <Annotation Term="OData.LongDescription" String="This property shall contain an array of links to resources of type Certificate that were issued by the CA that is represented by this certificate."/> 590 <Annotation Term="OData.AutoExpandReferences"/> 591 </NavigationProperty> 592 </ComplexType> 593 594 <EnumType Name="CertificateUsageType"> 595 <Member Name="User"> 596 <Annotation Term="OData.Description" String="This certificate is a user certificate like those associated with a manager account."/> 597 </Member> 598 <Member Name="Web"> 599 <Annotation Term="OData.Description" String="This certificate is a web or HTTPS certificate like those used for event destinations."/> 600 </Member> 601 <Member Name="SSH"> 602 <Annotation Term="OData.Description" String="This certificate is used for SSH."/> 603 </Member> 604 <Member Name="Device"> 605 <Annotation Term="OData.Description" String="This certificate is a device type certificate like those associated with SPDM and other standards."/> 606 </Member> 607 <Member Name="Platform"> 608 <Annotation Term="OData.Description" String="This certificate is a platform type certificate like those associated with SPDM and other standards."/> 609 </Member> 610 <Member Name="BIOS"> 611 <Annotation Term="OData.Description" String="This certificate is a BIOS certificate like those associated with UEFI."/> 612 </Member> 613 <Member Name="IDevID"> 614 <Annotation Term="OData.Description" String="This certificate is an IDevID certificate like those associated with TCG TPMs."/> 615 <Annotation Term="Redfish.Revisions"> 616 <Collection> 617 <Record> 618 <PropertyValue Property="Kind" EnumMember="Redfish.RevisionKind/Added"/> 619 <PropertyValue Property="Version" String="v1_8_0"/> 620 </Record> 621 </Collection> 622 </Annotation> 623 </Member> 624 <Member Name="LDevID"> 625 <Annotation Term="OData.Description" String="This certificate is an LDevID certificate like those associated with TCG TPMs."/> 626 <Annotation Term="Redfish.Revisions"> 627 <Collection> 628 <Record> 629 <PropertyValue Property="Kind" EnumMember="Redfish.RevisionKind/Added"/> 630 <PropertyValue Property="Version" String="v1_8_0"/> 631 </Record> 632 </Collection> 633 </Annotation> 634 </Member> 635 <Member Name="IAK"> 636 <Annotation Term="OData.Description" String="This certificate is an IAK certificate like those associated with TCG TPMs."/> 637 <Annotation Term="Redfish.Revisions"> 638 <Collection> 639 <Record> 640 <PropertyValue Property="Kind" EnumMember="Redfish.RevisionKind/Added"/> 641 <PropertyValue Property="Version" String="v1_8_0"/> 642 </Record> 643 </Collection> 644 </Annotation> 645 </Member> 646 <Member Name="LAK"> 647 <Annotation Term="OData.Description" String="This certificate is an LAK certificate like those associated with TCG TPMs."/> 648 <Annotation Term="Redfish.Revisions"> 649 <Collection> 650 <Record> 651 <PropertyValue Property="Kind" EnumMember="Redfish.RevisionKind/Added"/> 652 <PropertyValue Property="Version" String="v1_8_0"/> 653 </Record> 654 </Collection> 655 </Annotation> 656 </Member> 657 </EnumType> 658 </Schema> 659 660 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_4_1"> 661 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 662 <Annotation Term="OData.Description" String="This version was created to update descriptions to reference attributes defined in RFC2985 and RFC5280."/> 663 <EntityType Name="Certificate" BaseType="Certificate.v1_4_0.Certificate"/> 664 </Schema> 665 666 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_4_2"> 667 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 668 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 669 <EntityType Name="Certificate" BaseType="Certificate.v1_4_1.Certificate"/> 670 </Schema> 671 672 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_5_0"> 673 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 674 <Annotation Term="Redfish.Release" String="2021.3"/> 675 676 <EntityType Name="Certificate" BaseType="Certificate.v1_4_0.Certificate"> 677 <Property Name="SPDM" Type="Certificate.v1_5_0.SPDM"> 678 <Annotation Term="OData.Description" String="SPDM-related information for the certificate."/> 679 <Annotation Term="OData.LongDescription" String="The value of this property shall contain SPDM-related information for the certificate. This property shall only be present for SPDM certificates."/> 680 </Property> 681 </EntityType> 682 683 <ComplexType Name="SPDM"> 684 <Annotation Term="OData.AdditionalProperties" Bool="false"/> 685 <Annotation Term="OData.Description" String="SPDM-related information for a certificate."/> 686 <Annotation Term="OData.LongDescription" String="This type shall contain SPDM-related information for a certificate."/> 687 <Property Name="SlotId" Type="Edm.Int64"> 688 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 689 <Annotation Term="OData.Description" String="Slot identifier of the certificate."/> 690 <Annotation Term="OData.LongDescription" String="The value of this property shall contain an integer between 0 and 7, inclusive, that represents the slot identifier for an SPDM-provided certificate."/> 691 </Property> 692 </ComplexType> 693 </Schema> 694 695 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_5_1"> 696 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 697 <Annotation Term="OData.Description" String="This version was created to update descriptions to reference attributes defined in RFC2985 and RFC5280."/> 698 <EntityType Name="Certificate" BaseType="Certificate.v1_5_0.Certificate"/> 699 </Schema> 700 701 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_5_2"> 702 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 703 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 704 <EntityType Name="Certificate" BaseType="Certificate.v1_5_1.Certificate"/> 705 </Schema> 706 707 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_6_0"> 708 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 709 <Annotation Term="Redfish.Release" String="2022.1"/> 710 711 <EntityType Name="Certificate" BaseType="Certificate.v1_5_1.Certificate"/> 712 713 <ComplexType Name="Identifier" BaseType="Certificate.v1_0_0.Identifier"> 714 <Property Name="DisplayString" Type="Edm.String"> 715 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 716 <Annotation Term="OData.Description" String="A human-readable string for this identifier."/> 717 <Annotation Term="OData.LongDescription" String="The value of this property shall contain a display string that represents the entire identifier. The string should be formatted using industry conventions, such as the single-line human-readable string described by RFC2253 and preserving the field order as shown in the certificate."/> 718 </Property> 719 <Property Name="DomainComponents" Type="Collection(Edm.String)"> 720 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 721 <Annotation Term="OData.Description" String="The domain components of the entity."/> 722 <Annotation Term="OData.LongDescription" String="The value of this property shall contain an array of domain component fields for the entity, as defined by the RFC4519 'domainComponent' attribute, in array order as they appear in the certificate."/> 723 </Property> 724 <Property Name="AdditionalCommonNames" Type="Collection(Edm.String)"> 725 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 726 <Annotation Term="OData.Description" String="Additional common names of the entity."/> 727 <Annotation Term="OData.LongDescription" String="The value of this property shall contain an array of additional common names for the entity, as defined by the RFC5280 'commonName' attribute, in array order as they appear in the certificate. This property shall not be present if only one common name is found. The first common name shall not appear in this property."/> 728 </Property> 729 <Property Name="AdditionalOrganizationalUnits" Type="Collection(Edm.String)"> 730 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 731 <Annotation Term="OData.Description" String="Additional organizational units of the entity."/> 732 <Annotation Term="OData.LongDescription" String="The value of this property shall contain an array of additional organizational units for the entity, as defined by the RFC5280 'organizationalUnitName' attribute, in array order as they appear in the certificate. This property shall not be present if only one organizational unit is found. The first organizational unit shall not appear in this property."/> 733 </Property> 734 </ComplexType> 735 </Schema> 736 737 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_6_1"> 738 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 739 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 740 <EntityType Name="Certificate" BaseType="Certificate.v1_6_0.Certificate"/> 741 </Schema> 742 743 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_7_0"> 744 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 745 <Annotation Term="Redfish.Release" String="2023.1"/> 746 747 <EntityType Name="Certificate" BaseType="Certificate.v1_6_0.Certificate"/> 748 749 <ComplexType Name="Identifier" BaseType="Certificate.v1_6_0.Identifier"> 750 <Property Name="AlternativeNames" Type="Collection(Edm.String)"> 751 <Annotation Term="OData.Permissions" EnumMember="OData.Permission/Read"/> 752 <Annotation Term="OData.Description" String="The additional host names of the entity."/> 753 <Annotation Term="OData.LongDescription" String="This property shall contain the additional host names of the entity, as defined by the RFC5280 'subjectAltName' attribute. This property shall not be present in the Issuer property."/> 754 </Property> 755 </ComplexType> 756 </Schema> 757 758 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_7_1"> 759 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 760 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 761 <EntityType Name="Certificate" BaseType="Certificate.v1_7_0.Certificate"/> 762 </Schema> 763 764 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_8_0"> 765 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 766 <Annotation Term="Redfish.Release" String="2023.2"/> 767 <Annotation Term="OData.Description" String="This version was created to add the values `IDevID`, `LDevID`, `IAK`, and `LAK` to CertificateUsageType to support TCG TPM certificates."/> 768 769 <EntityType Name="Certificate" BaseType="Certificate.v1_7_0.Certificate"/> 770 </Schema> 771 772 <Schema xmlns="http://docs.oasis-open.org/odata/ns/edm" Namespace="Certificate.v1_8_1"> 773 <Annotation Term="Redfish.OwningEntity" String="DMTF"/> 774 <Annotation Term="OData.Description" String="This version was created to correct various typographical errors."/> 775 <EntityType Name="Certificate" BaseType="Certificate.v1_8_0.Certificate"/> 776 </Schema> 777 778 </edmx:DataServices> 779</edmx:Edmx> 780