Class CIM_CertificateManagementService
extends CIM_KeyBasedCredentialManagementService

CIM_CertificateManagementService is used for managing X509 based certificates.

Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods

Class Hierarchy

Direct Known Subclasses

Class Qualifiers

Name	Data Type	Value
ClassConstraint	string	/* The constraints below aim to efficiently / / represent a singular OctetString. Each of the properties/ / is a single encoded string, thus only the first element / / needs to be populated. */ inv:self.CreateCertificateSigningRequest.Subject->size()<=1 and self.CreateCertificateSigningRequest.AltSubject->size()<=1 and self.CreateCertificateSigningRequest.CSR->size()=1 and self.CreateSelfSignedCertificate.Subject->size()<=1 and self.CreateSelfSignedCertificate.AltSubject->size()<=1 and self.ImportEncodedCertificates.EncodedCertificates->size()=1 and self.ApplyCRL.EncodedCRL->size()=1 and self.ExportEncodedCertificates.EncodedCertificates->size()=1
Description	string	CIM_CertificateManagementService is used for managing X509 based certificates.
UMLPackagePath	string	CIM::User::SecurityServices
Version	string	2.29.0

Class Properties

Inherited Properties

Name	Data Type	Class Origin
Caption	string	CIM_ManagedElement
CommunicationStatus	uint16	CIM_ManagedSystemElement
CreationClassName	string	CIM_Service
Description	string	CIM_ManagedElement
DetailedStatus	uint16	CIM_ManagedSystemElement
ElementName	string	CIM_ManagedElement
EnabledDefault	uint16	CIM_EnabledLogicalElement
EnabledState	uint16	CIM_EnabledLogicalElement
Generation	uint64	CIM_ManagedElement
HealthState	uint16	CIM_ManagedSystemElement
InstallDate	datetime	CIM_ManagedSystemElement
InstanceID	string	CIM_ManagedElement
Name	string	CIM_Service
OperatingStatus	uint16	CIM_ManagedSystemElement
OtherEnabledState	string	CIM_EnabledLogicalElement
PrimaryOwnerContact	string	CIM_Service
PrimaryOwnerName	string	CIM_Service
PrimaryStatus	uint16	CIM_ManagedSystemElement
RequestedState	uint16	CIM_EnabledLogicalElement
Started	boolean	CIM_Service
StartMode	string	CIM_Service
Status	string	CIM_ManagedSystemElement
SystemCreationClassName	string	CIM_Service
SystemName	string	CIM_Service
TimeOfLastStateChange	datetime	CIM_EnabledLogicalElement
TransitioningToState	uint16	CIM_EnabledLogicalElement
AvailableRequestedStates	uint16[]	CIM_EnabledLogicalElement
OperationalStatus	uint16[]	CIM_ManagedSystemElement
StatusDescriptions	string[]	CIM_ManagedSystemElement

Class Methods

Local Class Methods

CreateCertificateSigningRequest (uint32)

Method Qualifiers (CreateCertificateSigningRequest)

Name	Data Type	Value
Description	string	This method is called to request a Certificate Signing Request (CSR) based on the Distinguished Name provided through Subject parameter. The CSR utilizes PKCS#10 structure as defined in RFC2986. If either Subject parameter or AltSubject parameter are NULL, the method shall return 2 (Error Occured). If the PublicPrivateKeyPair parameter is NULL, then 1) PublicKeyAlgorithm shall specify the algorithm to be used for the public key, 2) the PublicKeySize shall specify the length for the public key in bits. If the PublicPrivateKeyPair parameter is NOT NULL then the following requirements shall apply: 1) the PublicKeyAlgorithm shall be NULL, 2) the PublicKeySize shall be NULL, 3) the PublicPrivateKeyPair shall reference an instance of CIM_UnsignedCredential representing the public/ private key pair to be used for the CSR. The OutputFormat parameter shall specify the output format of the CSR. If the OutputFormat parameter has a value that is not equal to any values in the OutputFormatsSupported property on the associated CIM_CertificateManagementCapabilities instance, then the method shall return 2 (Error Occured). Upon the successful execution, the CSR output parameter shall contain the CSR in PKCS#10 structure.
ValueMap	string	0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values	string	Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

Method Parameters (CreateCertificateSigningRequest)

Name	Type	Qualifiers
Name	Type	Name	Data Type	Value
AltSubject	string
		Description	string	Alternate subject identifier for the Certificate as specified by section 4.2.1.8 of RFC 3280.
		IN	boolean	true
OutputFormat	uint16
		Description	string	The OutputFormat property represents the requested format of the Certificate Signing Request.
		IN	boolean	true
		Required	boolean	true
		ValueMap	string	2, 3, .., 32768..65535
		Values	string	PEM, DER, DMTF Reserved, Vendor Reserved
PublicKeyAlgorithm	uint16
		Description	string	The PublicKeyAlgorithm specifies the algorithm to be used for the public key.
		IN	boolean	true
		ValueMap	string	2, 3, 4, .., 32768..65535
		Values	string	RSA, DSA, ECDSA, DMTF Reserved, Vendor Reserved
PublicKeySize	uint16
		Description	string	The PublicKeySize shall specify the length for the public key in bits.
		IN	boolean	true
		PUNIT	string	bit
SignatureAlgorithm	uint16
		Description	string	The SignatureAlgorithm parameter defines the signature algorithm used to sign the CertificateRequestInfo as part of the CSR as defined in RFC 2986. This parameter covers the algorithms specified in the RFC3279.
		In	boolean	true
		ValueMap	string	1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20..32767, 32768..65535
		Values	string	Other, SHA1withDSA, SHA1withECDSA, SHA224withECDSA, SHA256withECDSA, SHA384withECDSA, SHA512withECDSA, GOST3411withGOST3410, GOST3411withECGOST3410, MD2withRSA, MD5withRSA, SHA1withRSA, SHA224withRSA, SHA256withRSA, SHA384withRSA, SHA512withRSA, RIPEMD160withRSA, RIPEMD128withRSA, RIPEMD256withRSA, DMTF Reserved, Vendor Reserved
Subject	string
		Description	string	Subject shall contain information as required by section 4.1.2.6 of RFC 3280 and shall be formatted based on RFC 4514. An example of the value of the Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, L=Santa Clara, ST=California, C=US".
		DN	boolean	true
		IN	boolean	true
CSR	string[]
		Description	string	The CSR parameter is an output parameter that upon successful exection of this method will contain the formated Certificate Signing Request.Only the first element of the array property shall be populated.
		IN	boolean	false
		OctetString	boolean	true
		OUT	boolean	true
		Required	boolean	true
ExtendedKeyUsageType	uint16[]
		ArrayType	string	Indexed
		Description	string	Describes the type for ExtendedKeyUsageValue based on the ASN.1 GeneralName types.
		In	boolean	true
		ModelCorrespondence	string	CIM_CertificateManagementService.CreateCertificateSigningRequest.ExtendedKeyUsageValue
		ValueMap	string	1, 2, 3, 4, 5, 6, 7, 8, 9, .., 32768..65535
		Values	string	other, rfc822Name, dNSName, x400Address, directoryName, ediPartyName, uniformResourceIdentifier, iPAddress, registeredID, DMTF Reserved, Vendor Reserved
ExtendedKeyUsageValue	string[]
		ArrayType	string	Indexed
		Description	string	The ExtendedKeyUsageValue indicates one or more purposes for which the certified public key may be used in the type specified by the ExtendedKeyUsageType parameter.
		In	boolean	true
		ModelCorrespondence	string	CIM_CertificateManagementService.CreateCertificateSigningRequest.ExtendedKeyUsageType
Job	REF CIM_ConcreteJob
		Description	string	Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
		IN	boolean	false
		OUT	boolean	true
PublicPrivateKeyPair	REF CIM_UnsignedCredential
		Description	string	The PublicPrivateKeyPair parameter specifies a reference to an instance of CIM_UnsignedCredential which represents a public private key pair to be utilized by the CSR.The CIM_UnsignedCredential instance PublicKey and PublicKeyEncoding properties shall not be NULL.
		IN	boolean	true

CreateSelfSignedCertificate (uint32)

Method Qualifiers (CreateSelfSignedCertificate)

Name	Data Type	Value
Description	string	This method is called to generate to generate a self-signed certificate. If either Subject parameter or AltSubject parameter are NULL, the method shall return 2 (Error Occured). If the PublicPrivateKeyPair parameter is NULL, the following numbered requirements shall apply: 1) the PublicKeyAlgorithm shall be non-NULL and specify the algorithm to be used for the public key, 3) the PublicKeySize shall be non-NULL and specify the length for the public key in bits. If the PublicPrivateKeyPair parameter is not NULL, the following numbered requirements shall apply: 1) the PublicKeyAlgorithm shall be NULL, 2) the PublicKeySize shall be NULL, 3) the PublicPrivateKeyPair shall reference an instance of CIM_UnsignedCredential representing the public/ private key pair to be used for the self signed certificate. Upon successful execution the reference to the newly created instance of CIM_X509Certificate shall be returned in the NewCertificate parameter which represents the self-signed certificate with the public/private key pair of the size specified by the KeySize parameter. If the Keystore parameter is not NULL, this instance shall be associated to the instance of CIM_Keystore referenced by the Keystore parameter through CIM_MemberOfCollection association. If the CredentialContext parameter is not NULL, the newly created instance shall be associated with the instance of CIM_ManagedElement referenced by the CredentialContext parameter through CIM_CredentialContext association. If the CredentialContext parameter is NULL, the newly created instance shall not be associated with the instance of CIM_ManagedElement through CIM_CredentialContext association.
ValueMap	string	0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values	string	Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

Method Parameters (CreateSelfSignedCertificate)

Name	Type	Qualifiers
Name	Type	Name	Data Type	Value
AltSubject	string
		Description	string	Alternate subject identifier for the Certificate as specified by section 4.2.1.8 of RFC 3280.
		IN	boolean	true
PublicKeyAlgorithm	uint16
		Description	string	The PublicKeyAlgorithm specifies the algorithm to be used for the public key.
		IN	boolean	true
		ValueMap	string	2, 3, 4, .., 32768..65535
		Values	string	RSA, DSA, ECDSA, DMTF Reserved, Vendor Reserved
PublicKeySize	uint16
		Description	string	The PublicKeySize shall specify the length for the public key in bits. The value shall be of power of 2.
		IN	boolean	true
		PUNIT	string	bit
SignatureAlgorithm	uint16
		Description	string	The SignatureAlgorithm parameter defines the signature algorithm used to sign the TBSCertificate as defined in RFC 3280. This parameter covers the algorithms specified in the RFC3279.
		In	boolean	true
		ValueMap	string	1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20..32767, 32768..65535
		Values	string	Other, SHA1withDSA, SHA1withECDSA, SHA224withECDSA, SHA256withECDSA, SHA384withECDSA, SHA512withECDSA, GOST3411withGOST3410, GOST3411withECGOST3410, MD2withRSA, MD5withRSA, SHA1withRSA, SHA224withRSA, SHA256withRSA, SHA384withRSA, SHA512withRSA, RIPEMD160withRSA, RIPEMD128withRSA, RIPEMD256withRSA, DMTF Reserved, Vendor Reserved
Subject	string
		Description	string	Subject shall contain the information as required by section 4.1.2.6 of RFC 3280 and shall be formatted based on RFC 4514. An example of the value of the Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, OU=Sales, L=Santa Clara, ST=California, C=US".
		DN	boolean	true
		IN	boolean	true
Usage	uint16
		Description	string	The usage of the certificate by the managed element that the certificate is for or is scoped to.
		IN	boolean	true
		ModelCorrespondence	string	CIM_CredentialContext.Usage
		ValueMap	string	2, 3, 4, 6, 7, 8, .., 32768..65535
		Values	string	Owned, Trusted, Trusted for Authentication, Trusted for Authorization, Trusted for Authentication/Authorization, Trusted for Third-Party Authentication/Authorization, DMTF Reserved, Vendor Reserved
CredentialContext	REF CIM_ManagedElement
		Description	string	The managed element that represents the user or owner or the scoping element of the certificate. Such managed element could be the web service that owns the certificate or uses it for verification or account that the certificate is scoped to.
		IN	boolean	true
Job	REF CIM_ConcreteJob
		Description	string	Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
		IN	boolean	false
		OUT	boolean	true
Keystore	REF CIM_Keystore
		Description	string	The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the new certificate will be added.
		IN	boolean	true
PublicPrivateKeyPair	REF CIM_UnsignedCredential
		Description	string	The PublicPrivateKeyPair parameter specifies a reference to an instance of CIM_UnsignedCredential which represents a public private key pair to be utilized by the newly created selef signed certificate. The PublicKey and PublicKeyEncodingproperties of the instance of CIM_UnsignedCredentialshall be Non-NULL.
		IN	boolean	true
SelfSignedCertificate	REF CIM_X509Certificate
		Description	string	Reference to the newly created instance of CIM_X509Certificate representing the self signed certificate.
		IN	boolean	false
		OUT	boolean	true

ImportEncodedCertificates (uint32)

Method Qualifiers (ImportEncodedCertificates)

Name	Data Type	Value
Description	string	This method is called to import a certificate or a certificate chain using the certificate's encoded representation. Upon successful execution the array of references to the instance(s) of CIM_X509Certificate representing the imported certificate or certificate chain shall be returned inside the NewCertificates output parameter. If the Keystore parameter is not NULL, the newly created instance(s) of CIM_X509Certificate shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. If the CredentialContext parameter is not NULL, the newly created instance(s) of the CIM_X509Certificate shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association. If the CredentialContext parameter is NULL, the newly created instance(s) of the CIM_X509Certificate shall not be associated to the insatnces of CIM_ManagedElement through the CIM_CredentialContext association.
ValueMap	string	0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values	string	Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

Method Parameters (ImportEncodedCertificates)

Name	Type	Qualifiers
Name	Type	Name	Data Type	Value
Format	uint16
		Description	string	The Format shall specify the format for the encoding that is used by octet string EncodedCertificates parameter.
		IN	boolean	true
		Required	boolean	true
		ValueMap	string	2, 3, 4, 5, .., 32768..65535
		Values	string	DER, PEM, PKCS7, PKCS12, DMTF Reserved, Vendor Reserved
EncodedCertificates	string[]
		Description	string	An array of strings representing octet string of an encoded certificate or certificate chain to be imported. Only the first element of the array property shall be populated, even if a certificate chain is imported.
		IN	boolean	true
		OctetString	boolean	true
		Required	boolean	true
Usage	uint16[]
		ArrayType	string	Indexed
		Description	string	The usage of the certificate by the managed element that the certificate is for or is scoped to. If a certificate chain is imported, the sequence of elements in the Usage array shall correspond to the sequence of the certificates in the EncodedCertificates octet string parameter.
		IN	boolean	true
		ModelCorrespondence	string	CIM_CredentialContext.Usage, CIM_CertificateManagementService.ImportEncodedCertificates.NewCertificates
		ValueMap	string	2, 3, 4, 6, 7, 8, .., 32768..65535
		Values	string	Owned, Trusted, Trusted for Authentication, Trusted for Authorization, Trusted for Authentication/Authorization, Trusted for Third-Party Authentication/Authorization, DMTF Reserved, Vendor Reserved
NewCertificates	CIM_X509Certificate[]
		ArrayType	string	Indexed
		Description	string	Reference to the newly created instance of CIM_X509Certificate representing the imported certificate or certificate chain.
		IN	boolean	false
		ModelCorrespondence	string	CIM_CertificateManagementService.ImportEncodedCertificates.Usage
		OUT	boolean	true
		Required	boolean	true
CredentialContext	REF CIM_ManagedElement
		Description	string	The managed element that represents the user or owner or the scoping element of the certificate(s). Such managed element could be the web service that owns the certificate(s) or uses it for verification or account that the certificate is scoped to.
		IN	boolean	true
Job	REF CIM_ConcreteJob
		Description	string	Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
		IN	boolean	false
		OUT	boolean	true
Keystore	REF CIM_Keystore
		Description	string	The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the new certificate or certificate chain will be added.
		IN	boolean	true

ImportCertificates (uint32)

Method Qualifiers (ImportCertificates)

Name	Data Type	Value
Description	string	This method is called to import a certificate or a certificate chain using an array of embedded instance of CIM_X509Certificate. Upon successful execution the array of references to the instance(s) of CIM_X509Certificate representing the imported certificate or certificate chain shall be returned by the NewCertificates output parameter. If the Keystore parameter is not NULL, the newly created instance(s) of CIM_X509Certificate shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. If the CredentialContext parameter is not NULL, the newly created instance(s) of the CIM_X509Certificate shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association.If the CredentialContext parameter is NULL, the newly created instance(s) of the CIM_X509Certificate shall not be associated to the insatnces of CIM_ManagedElement through the CIM_CredentialContext association.
ValueMap	string	0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values	string	Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

Method Parameters (ImportCertificates)

Name	Type	Qualifiers
Name	Type	Name	Data Type	Value
InputCertificates	string[]
		Description	string	An array of embedded instance(s) of CIM_X509Certificate that contains the necessary information to import a certificate or a certificate chain.
		EmbeddedInstance	string	CIM_X509Certificate
		IN	boolean	true
		Required	boolean	true
Usage	uint16[]
		ArrayType	string	Indexed
		Description	string	The usage of the certificate by the managed element that the certificate is for or is scoped to. If a certificate chain is imported, the sequence of elements in the Usage array shall correspond to the sequence of the certificates in the InputCertificates array parameter.
		IN	boolean	true
		ModelCorrespondence	string	CIM_CredentialContext.Usage, CIM_CertificateManagementService.ImportCertificates.InputCertificates, CIM_CertificateManagementService.ImportCertificates.Usage
		ValueMap	string	2, 3, 4, 6, 7, 8, .., 32768..65535
		Values	string	Owned, Trusted, Trusted for Authentication, Trusted for Authorization, Trusted for Authentication/Authorization, Trusted for Third-Party Authentication/Authorization, DMTF Reserved, Vendor Reserved
NewCertificates	CIM_X509Certificate[]
		Description	string	Reference to the newly created instance of CIM_X509Certificate representing the imported certificate or certificate chain.
		IN	boolean	false
		OUT	boolean	true
		Required	boolean	true
CredentialContext	REF CIM_ManagedElement
		Description	string	The managed element that represents the user or owner or the scoping element of the certificate(s). Such managed element could be the web service that owns the certificate(s) or uses it for verification or account that the certificate is scoped to.
		IN	boolean	true
Job	REF CIM_ConcreteJob
		Description	string	Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
		IN	boolean	false
		OUT	boolean	true
Keystore	REF CIM_Keystore
		Description	string	The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the new certificate or certificate chain will be added.
		IN	boolean	true

ExportEncodedCertificates (uint32)

Method Qualifiers (ExportEncodedCertificates)

Name	Data Type	Value
Description	string	This method is called to export a certificate or a certificate chain using the certificate's encoded representation. Upon successful execution the array of unsigned integers representing octet string of the exported certificate or certificate chain shall be returned inside the EncodedCertificates output parameter based on the encoding specified in the EncodingFormat parameter.
ValueMap	string	0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values	string	Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

Method Parameters (ExportEncodedCertificates)

Name	Type	Qualifiers
Name	Type	Name	Data Type	Value
Format	uint16
		Description	string	The Format parameter specifies the format of the octet string EncodedCertificates parameter.
		IN	boolean	true
		Required	boolean	true
		ValueMap	string	2, 3, 4, 5, .., 32768..65535
		Values	string	DER, Base64, PKCS7, PKCS12, DMTF Reserved, Vendor Reserved
EncodedCertificates	string[]
		Description	string	An array of strings representing octet string of an exported encoded certificate or certificate chain. Only the first element of the array property shall be populated, even if a certificate chain is exported.
		IN	boolean	false
		OctetString	boolean	true
		OUT	boolean	true
		Required	boolean	true
CertificatesToExport	CIM_X509Certificate[]
		Description	string	Reference to the instance(s) of CIM_SignedCredential representing the certificate or certificate chain to be exported.
		IN	boolean	true
		Required	boolean	true
Job	REF CIM_ConcreteJob
		Description	string	Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
		IN	boolean	false
		OUT	boolean	true

ApplyCRL (uint32)

Method Qualifiers (ApplyCRL)

Name	Data Type	Value
Description	string	This method is called to apply Certificate Revocation List (CRL) using an encoded format. Upon successful execution the references to the instance(s) of CIM_X509CRL representing the applied CRL shall be returned inside the AppliedCRL output parameter. If the Keystore parameter is not NULL, the newly created instance(s) of CIM_X509CRL shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. The newly created instance(s) of the CIM_X509CRL shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association.
ValueMap	string	0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values	string	Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

Method Parameters (ApplyCRL)

Name	Type	Qualifiers
Name	Type	Name	Data Type	Value
Format	uint16
		Description	string	The Format shall specify the format for the encoding that is used by octet string EncodedCRL parameter.
		IN	boolean	true
		Required	boolean	true
		ValueMap	string	2, 3, 4, 5, .., 32768..65535
		Values	string	DER, PEM, PKCS7, PKCS12, DMTF Reserved, Vendor Reserved
EncodedCRL	string[]
		Description	string	An array of unsigned integers representing octet string of an encoded CRL to be applied. Only the first element of the array property shall be populated.
		IN	boolean	true
		OctetString	boolean	true
		Required	boolean	true
AppliedCRL	REF CIM_X509CRL
		Description	string	Reference to the newly created instance of CIM_X509CRL representing the applied CRL.
		IN	boolean	false
		OUT	boolean	true
		Required	boolean	true
CredentialContext	REF CIM_ManagedElement
		Description	string	The managed element that represents the service or the managed element for which the certificates were revoked by the application of the CRL.
		IN	boolean	true
		Required	boolean	true
Job	REF CIM_ConcreteJob
		Description	string	Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
		IN	boolean	false
		OUT	boolean	true
Keystore	REF CIM_Keystore
		Description	string	The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the CRL will be applied.
		IN	boolean	true

ApplyDecodedCRL (uint32)

Method Qualifiers (ApplyDecodedCRL)

Name	Data Type	Value
Description	string	This method is called to apply Certificate Revocation List (CRL) using the decoded format. Upon successful execution the references to the instance(s) of CIM_X509CRL representing the applied CRL shall be returned inside the AppliedCRL output parameter. If the Keystore parameter is not NULL, the newly created instance(s) of CIM_X509CRL shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. The newly created instance(s) of the CIM_X509CRL shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association.
ValueMap	string	0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values	string	Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

Method Parameters (ApplyDecodedCRL)

Name	Type	Qualifiers
Name	Type	Name	Data Type	Value
Issuer	string
		Description	string	Issuer represents the information about the issuer of the CRL. The Issuer property shall contain information as required by section 4.1.2.4 of RFC 3280 and shall be formatted based on RFC 4514. An example of the value of the Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, OU=Sales, L=Santa Clara, ST=California, C=US".
		DN	boolean	true
		IN	boolean	true
		Required	boolean	true
SerialNumbers	string[]
		Description	string	An array of serial numbers of X.509 certificates that are part of CRL.
		IN	boolean	true
		OctetString	boolean	true
		Required	boolean	true
AppliedCRL	REF CIM_X509CRL
		Description	string	Reference to the newly created instance of CIM_X509CRL representing the applied CRL.
		IN	boolean	false
		OUT	boolean	true
		Required	boolean	true
CredentialContext	REF CIM_ManagedElement
		Description	string	The managed element that represents the service or the managed element for which the certificates were revoked by the application of the CRL.
		IN	boolean	true
		Required	boolean	true
Job	REF CIM_ConcreteJob
		Description	string	Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
		IN	boolean	false
		OUT	boolean	true
Keystore	REF CIM_Keystore
		Description	string	The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the CRL will be applied.
		IN	boolean	true

Inherited Class Methods

Name	Return Type	Class Origin
ChangeAffectedElementsAssignedSequence	uint32	CIM_Service
CreateKeystore	uint32	CIM_KeyBasedCredentialManagementService
ImportPublicPrivateKeyPair	uint32	CIM_KeyBasedCredentialManagementService
RequestStateChange	uint32	CIM_EnabledLogicalElement
StartService	uint32	CIM_Service
StopService	uint32	CIM_Service

Class CIM_CertificateManagementServiceextends CIM_KeyBasedCredentialManagementService

Table of Contents Hierarchy Direct Known Subclasses Class Qualifiers Class Properties Class Methods

Class Hierarchy

Direct Known Subclasses

Class Qualifiers

Class Properties

Inherited Properties

Class Methods

Local Class Methods

CreateCertificateSigningRequest (uint32)

Method Qualifiers (CreateCertificateSigningRequest)

Method Parameters (CreateCertificateSigningRequest)

CreateSelfSignedCertificate (uint32)

Method Qualifiers (CreateSelfSignedCertificate)

Method Parameters (CreateSelfSignedCertificate)

ImportEncodedCertificates (uint32)

Method Qualifiers (ImportEncodedCertificates)

Method Parameters (ImportEncodedCertificates)

ImportCertificates (uint32)

Method Qualifiers (ImportCertificates)

Method Parameters (ImportCertificates)

ExportEncodedCertificates (uint32)

Method Qualifiers (ExportEncodedCertificates)

Method Parameters (ExportEncodedCertificates)

ApplyCRL (uint32)

Method Qualifiers (ApplyCRL)

Method Parameters (ApplyCRL)

ApplyDecodedCRL (uint32)

Method Qualifiers (ApplyDecodedCRL)

Method Parameters (ApplyDecodedCRL)

Inherited Class Methods

Class CIM_CertificateManagementService
extends CIM_KeyBasedCredentialManagementService

Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods