# Class CIM_CertificateManagementService
extends CIM_KeyBasedCredentialManagementService

CIM_CertificateManagementService is used for managing X509 based certificates.

### Table of Contents
Hierarchy
Direct Known Subclasses
Class Qualifiers
Class Properties
Class Methods

## Class Hierarchy

CIM_ManagedElement
|
+--CIM_ManagedSystemElement
|
+--CIM_LogicalElement
|
+--CIM_EnabledLogicalElement
|
+--CIM_Service
|
+--CIM_SecurityService
|
+--CIM_AuthenticationService
|
+--CIM_CredentialManagementService
|
+--CIM_KeyBasedCredentialManagementService
|
+--CIM_CertificateManagementService

## Direct Known Subclasses

## Class Qualifiers

Name | Data Type | Value
--- | --- | ---

ClassConstraint

string

/* The constraints below aim to efficiently */ /* represent a singular OctetString. Each of the properties*/ /* is a single encoded string, thus only the first element */ /* needs to be populated. */ inv:self.CreateCertificateSigningRequest.Subject->size()<=1 and self.CreateCertificateSigningRequest.AltSubject->size()<=1 and self.CreateCertificateSigningRequest.CSR->size()=1 and self.CreateSelfSignedCertificate.Subject->size()<=1 and self.CreateSelfSignedCertificate.AltSubject->size()<=1 and self.ImportEncodedCertificates.EncodedCertificates->size()=1 and self.ApplyCRL.EncodedCRL->size()=1 and self.ExportEncodedCertificates.EncodedCertificates->size()=1

Description | string | CIM_CertificateManagementService is used for managing X509 based certificates.
UMLPackagePath | string | CIM::User::SecurityServices
Version | string | 2.29.0

## Class Properties

### Inherited Properties

Name | Data Type | Class Origin
--- | --- | ---
Caption | string | CIM_ManagedElement
CommunicationStatus | uint16 | CIM_ManagedSystemElement
CreationClassName | string | CIM_Service
Description | string | CIM_ManagedElement
DetailedStatus | uint16 | CIM_ManagedSystemElement
ElementName | string | CIM_ManagedElement
EnabledDefault | uint16 | CIM_EnabledLogicalElement
EnabledState | uint16 | CIM_EnabledLogicalElement
HealthState | uint16 | CIM_ManagedSystemElement
InstallDate | datetime | CIM_ManagedSystemElement
InstanceID | string | CIM_ManagedElement
Name | string | CIM_Service
OperatingStatus | uint16 | CIM_ManagedSystemElement
OtherEnabledState | string | CIM_EnabledLogicalElement
PrimaryOwnerContact | string | CIM_Service
PrimaryOwnerName | string | CIM_Service
PrimaryStatus | uint16 | CIM_ManagedSystemElement
RequestedState | uint16 | CIM_EnabledLogicalElement
Started | boolean | CIM_Service
StartMode | string | CIM_Service
Status | string | CIM_ManagedSystemElement
SystemCreationClassName | string | CIM_Service
SystemName | string | CIM_Service
TimeOfLastStateChange | datetime | CIM_EnabledLogicalElement
TransitioningToState | uint16 | CIM_EnabledLogicalElement
AvailableRequestedStates | uint16[] | CIM_EnabledLogicalElement
OperationalStatus | uint16[] | CIM_ManagedSystemElement
StatusDescriptions | string[] | CIM_ManagedSystemElement

## Class Methods

### Local Class Methods

#### CreateCertificateSigningRequest (uint32)

#### Method Qualifiers (CreateCertificateSigningRequest)

Name | Data Type | Value
--- | --- | ---

Description

string

This method is called to request a Certificate Signing Request (CSR) based on the Distinguished Name provided through Subject parameter. The CSR utilizes PKCS#10 structure as defined in RFC2986. If either Subject parameter or AltSubject parameter are NULL, the method shall return 2 (Error Occured). If the PublicPrivateKeyPair parameter is NULL, then 1) PublicKeyAlgorithm shall specify the algorithm to be used for the public key, 2) the PublicKeySize shall specify the length for the public key in bits. If the PublicPrivateKeyPair parameter is NOT NULL then the following requirements shall apply: 1) the PublicKeyAlgorithm shall be NULL, 2) the PublicKeySize shall be NULL, 3) the PublicPrivateKeyPair shall reference an instance of CIM_UnsignedCredential representing the public/ private key pair to be used for the CSR. The OutputFormat parameter shall specify the output format of the CSR. If the OutputFormat parameter has a value that is not equal to any values in the OutputFormatsSupported property on the associated CIM_CertificateManagementCapabilities instance, then the method shall return 2 (Error Occured). Upon the successful execution, the CSR output parameter shall contain the CSR in PKCS#10 structure.

ValueMap | string | 0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

#### Method Parameters (CreateCertificateSigningRequest)

Name | Type | Qualifiers
--- | --- | ---
Name | Data Type | Value
AltSubject | string
Description | string | Alternate subject identifier for the Certificate as specified by section 4.2.1.8 of RFC 3280.
IN | boolean | true
OutputFormat | uint16
Description | string | The OutputFormat property represents the requested format of the Certificate Signing Request.
IN | boolean | true
Required | boolean | true
ValueMap | string | 2, 3, .., 32768..65535
Values | string | PEM, DER, DMTF Reserved, Vendor Reserved
PublicKeyAlgorithm | uint16
Description | string | The PublicKeyAlgorithm specifies the algorithm to be used for the public key.
IN | boolean | true
ValueMap | string | 2, 3, 4, .., 32768..65535
Values | string | RSA, DSA, ECDSA, DMTF Reserved, Vendor Reserved
PublicKeySize | uint16
Description | string | The PublicKeySize shall specify the length for the public key in bits.
IN | boolean | true
PUNIT | string | bit
SignatureAlgorithm | uint16
Description | string | The SignatureAlgorithm parameter defines the signature algorithm used to sign the CertificateRequestInfo as part of the CSR as defined in RFC 2986. This parameter covers the algorithms specified in the RFC3279.
In | boolean | true
ValueMap | string | 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20..32767, 32768..65535
Values | string | Other, SHA1withDSA, SHA1withECDSA, SHA224withECDSA, SHA256withECDSA, SHA384withECDSA, SHA512withECDSA, GOST3411withGOST3410, GOST3411withECGOST3410, MD2withRSA, MD5withRSA, SHA1withRSA, SHA224withRSA, SHA256withRSA, SHA384withRSA, SHA512withRSA, RIPEMD160withRSA, RIPEMD128withRSA, RIPEMD256withRSA, DMTF Reserved, Vendor Reserved
Subject | string
Description | string | Subject shall contain information as required by section 4.1.2.6 of RFC 3280 and shall be formatted based on RFC 4514. An example of the value of the Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, L=Santa Clara, ST=California, C=US".
DN | boolean | true
IN | boolean | true
CSR | string[]
Description | string | The CSR parameter is an output parameter that upon successful exection of this method will contain the formated Certificate Signing Request.Only the first element of the array property shall be populated.
IN | boolean | false
OctetString | boolean | true
OUT | boolean | true
Required | boolean | true
ExtendedKeyUsageType | uint16[]
ArrayType | string | Indexed
Description | string | Describes the type for ExtendedKeyUsageValue based on the ASN.1 GeneralName types.
In | boolean | true
ModelCorrespondence | string | CIM_CertificateManagementService.CreateCertificateSigningRequest.ExtendedKeyUsageValue
ValueMap | string | 1, 2, 3, 4, 5, 6, 7, 8, 9, .., 32768..65535
Values | string | other, rfc822Name, dNSName, x400Address, directoryName, ediPartyName, uniformResourceIdentifier, iPAddress, registeredID, DMTF Reserved, Vendor Reserved
ExtendedKeyUsageValue | string[]
ArrayType | string | Indexed
Description | string | The ExtendedKeyUsageValue indicates one or more purposes for which the certified public key may be used in the type specified by the ExtendedKeyUsageType parameter.
In | boolean | true
ModelCorrespondence | string | CIM_CertificateManagementService.CreateCertificateSigningRequest.ExtendedKeyUsageType
Job | REF CIM_ConcreteJob
Description | string | Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
IN | boolean | false
OUT | boolean | true
PublicPrivateKeyPair | REF CIM_UnsignedCredential
Description | string | The PublicPrivateKeyPair parameter specifies a reference to an instance of CIM_UnsignedCredential which represents a public private key pair to be utilized by the CSR.The CIM_UnsignedCredential instance PublicKey and PublicKeyEncoding properties shall not be NULL.
IN | boolean | true

#### CreateSelfSignedCertificate (uint32)

#### Method Qualifiers (CreateSelfSignedCertificate)

Name | Data Type | Value
--- | --- | ---

Description

string

This method is called to generate to generate a self-signed certificate. If either Subject parameter or AltSubject parameter are NULL, the method shall return 2 (Error Occured). If the PublicPrivateKeyPair parameter is NULL, the following numbered requirements shall apply: 1) the PublicKeyAlgorithm shall be non-NULL and specify the algorithm to be used for the public key, 3) the PublicKeySize shall be non-NULL and specify the length for the public key in bits. If the PublicPrivateKeyPair parameter is not NULL, the following numbered requirements shall apply: 1) the PublicKeyAlgorithm shall be NULL, 2) the PublicKeySize shall be NULL, 3) the PublicPrivateKeyPair shall reference an instance of CIM_UnsignedCredential representing the public/ private key pair to be used for the self signed certificate. Upon successful execution the reference to the newly created instance of CIM_X509Certificate shall be returned in the NewCertificate parameter which represents the self-signed certificate with the public/private key pair of the size specified by the KeySize parameter. If the Keystore parameter is not NULL, this instance shall be associated to the instance of CIM_Keystore referenced by the Keystore parameter through CIM_MemberOfCollection association. If the CredentialContext parameter is not NULL, the newly created instance shall be associated with the instance of CIM_ManagedElement referenced by the CredentialContext parameter through CIM_CredentialContext association. If the CredentialContext parameter is NULL, the newly created instance shall not be associated with the instance of CIM_ManagedElement through CIM_CredentialContext association.

ValueMap | string | 0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

#### Method Parameters (CreateSelfSignedCertificate)

Name | Type | Qualifiers
--- | --- | ---
Name | Data Type | Value
AltSubject | string
Description | string | Alternate subject identifier for the Certificate as specified by section 4.2.1.8 of RFC 3280.
IN | boolean | true
PublicKeyAlgorithm | uint16
Description | string | The PublicKeyAlgorithm specifies the algorithm to be used for the public key.
IN | boolean | true
ValueMap | string | 2, 3, 4, .., 32768..65535
Values | string | RSA, DSA, ECDSA, DMTF Reserved, Vendor Reserved
PublicKeySize | uint16
Description | string | The PublicKeySize shall specify the length for the public key in bits. The value shall be of power of 2.
IN | boolean | true
PUNIT | string | bit
SignatureAlgorithm | uint16
Description | string | The SignatureAlgorithm parameter defines the signature algorithm used to sign the TBSCertificate as defined in RFC 3280. This parameter covers the algorithms specified in the RFC3279.
In | boolean | true
ValueMap | string | 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20..32767, 32768..65535
Values | string | Other, SHA1withDSA, SHA1withECDSA, SHA224withECDSA, SHA256withECDSA, SHA384withECDSA, SHA512withECDSA, GOST3411withGOST3410, GOST3411withECGOST3410, MD2withRSA, MD5withRSA, SHA1withRSA, SHA224withRSA, SHA256withRSA, SHA384withRSA, SHA512withRSA, RIPEMD160withRSA, RIPEMD128withRSA, RIPEMD256withRSA, DMTF Reserved, Vendor Reserved
Subject | string
Description | string | Subject shall contain the information as required by section 4.1.2.6 of RFC 3280 and shall be formatted based on RFC 4514. An example of the value of the Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, OU=Sales, L=Santa Clara, ST=California, C=US".
DN | boolean | true
IN | boolean | true
Usage | uint16
Description | string | The usage of the certificate by the managed element that the certificate is for or is scoped to.
IN | boolean | true
ModelCorrespondence | string | CIM_CredentialContext.Usage
ValueMap | string | 2, 3, 4, 6, 7, 8, .., 32768..65535
Values | string | Owned, Trusted, Trusted for Authentication, Trusted for Authorization, Trusted for Authentication/Authorization, Trusted for Third-Party Authentication/Authorization, DMTF Reserved, Vendor Reserved
CredentialContext | REF CIM_ManagedElement
Description | string | The managed element that represents the user or owner or the scoping element of the certificate. Such managed element could be the web service that owns the certificate or uses it for verification or account that the certificate is scoped to.
IN | boolean | true
Job | REF CIM_ConcreteJob
Description | string | Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
IN | boolean | false
OUT | boolean | true
Keystore | REF CIM_Keystore
Description | string | The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the new certificate will be added.
IN | boolean | true
PublicPrivateKeyPair | REF CIM_UnsignedCredential
Description | string | The PublicPrivateKeyPair parameter specifies a reference to an instance of CIM_UnsignedCredential which represents a public private key pair to be utilized by the newly created selef signed certificate. The PublicKey and PublicKeyEncodingproperties of the instance of CIM_UnsignedCredentialshall be Non-NULL.
IN | boolean | true
SelfSignedCertificate | REF CIM_X509Certificate
Description | string | Reference to the newly created instance of CIM_X509Certificate representing the self signed certificate.
IN | boolean | false
OUT | boolean | true

#### ImportEncodedCertificates (uint32)

#### Method Qualifiers (ImportEncodedCertificates)

Name | Data Type | Value
--- | --- | ---

Description

string

This method is called to import a certificate or a certificate chain using the certificate's encoded representation. Upon successful execution the array of references to the instance(s) of CIM_X509Certificate representing the imported certificate or certificate chain shall be returned inside the NewCertificates output parameter. If the Keystore parameter is not NULL, the newly created instance(s) of CIM_X509Certificate shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. If the CredentialContext parameter is not NULL, the newly created instance(s) of the CIM_X509Certificate shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association. If the CredentialContext parameter is NULL, the newly created instance(s) of the CIM_X509Certificate shall not be associated to the insatnces of CIM_ManagedElement through the CIM_CredentialContext association.

ValueMap | string | 0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

#### Method Parameters (ImportEncodedCertificates)

Name | Type | Qualifiers
--- | --- | ---
Name | Data Type | Value
Format | uint16
Description | string | The Format shall specify the format for the encoding that is used by octet string EncodedCertificates parameter.
IN | boolean | true
Required | boolean | true
ValueMap | string | 2, 3, 4, 5, .., 32768..65535
Values | string | DER, PEM, PKCS7, PKCS12, DMTF Reserved, Vendor Reserved
EncodedCertificates | string[]
Description | string | An array of strings representing octet string of an encoded certificate or certificate chain to be imported. Only the first element of the array property shall be populated, even if a certificate chain is imported.
IN | boolean | true
OctetString | boolean | true
Required | boolean | true
Usage | uint16[]
ArrayType | string | Indexed
Description | string | The usage of the certificate by the managed element that the certificate is for or is scoped to. If a certificate chain is imported, the sequence of elements in the Usage array shall correspond to the sequence of the certificates in the EncodedCertificates octet string parameter.
IN | boolean | true
ModelCorrespondence | string | CIM_CredentialContext.Usage, CIM_CertificateManagementService.ImportEncodedCertificates.NewCertificates
ValueMap | string | 2, 3, 4, 6, 7, 8, .., 32768..65535
Values | string | Owned, Trusted, Trusted for Authentication, Trusted for Authorization, Trusted for Authentication/Authorization, Trusted for Third-Party Authentication/Authorization, DMTF Reserved, Vendor Reserved
NewCertificates | CIM_X509Certificate[]
ArrayType | string | Indexed
Description | string | Reference to the newly created instance of CIM_X509Certificate representing the imported certificate or certificate chain.
IN | boolean | false
ModelCorrespondence | string | CIM_CertificateManagementService.ImportEncodedCertificates.Usage
OUT | boolean | true
Required | boolean | true
CredentialContext | REF CIM_ManagedElement
Description | string | The managed element that represents the user or owner or the scoping element of the certificate(s). Such managed element could be the web service that owns the certificate(s) or uses it for verification or account that the certificate is scoped to.
IN | boolean | true
Job | REF CIM_ConcreteJob
Description | string | Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
IN | boolean | false
OUT | boolean | true
Keystore | REF CIM_Keystore
Description | string | The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the new certificate or certificate chain will be added.
IN | boolean | true

#### ImportCertificates (uint32)

#### Method Qualifiers (ImportCertificates)

Name | Data Type | Value
--- | --- | ---

Description

string

This method is called to import a certificate or a certificate chain using an array of embedded instance of CIM_X509Certificate. Upon successful execution the array of references to the instance(s) of CIM_X509Certificate representing the imported certificate or certificate chain shall be returned by the NewCertificates output parameter. If the Keystore parameter is not NULL, the newly created instance(s) of CIM_X509Certificate shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. If the CredentialContext parameter is not NULL, the newly created instance(s) of the CIM_X509Certificate shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association.If the CredentialContext parameter is NULL, the newly created instance(s) of the CIM_X509Certificate shall not be associated to the insatnces of CIM_ManagedElement through the CIM_CredentialContext association.

ValueMap | string | 0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

#### Method Parameters (ImportCertificates)

Name | Type | Qualifiers
--- | --- | ---
Name | Data Type | Value
InputCertificates | string[]
Description | string | An array of embedded instance(s) of CIM_X509Certificate that contains the necessary information to import a certificate or a certificate chain.
EmbeddedInstance | string | CIM_X509Certificate
IN | boolean | true
Required | boolean | true
Usage | uint16[]
ArrayType | string | Indexed
Description | string | The usage of the certificate by the managed element that the certificate is for or is scoped to. If a certificate chain is imported, the sequence of elements in the Usage array shall correspond to the sequence of the certificates in the InputCertificates array parameter.
IN | boolean | true
ModelCorrespondence | string | CIM_CredentialContext.Usage, CIM_CertificateManagementService.ImportCertificates.InputCertificates, CIM_CertificateManagementService.ImportCertificates.Usage
ValueMap | string | 2, 3, 4, 6, 7, 8, .., 32768..65535
Values | string | Owned, Trusted, Trusted for Authentication, Trusted for Authorization, Trusted for Authentication/Authorization, Trusted for Third-Party Authentication/Authorization, DMTF Reserved, Vendor Reserved
NewCertificates | CIM_X509Certificate[]
Description | string | Reference to the newly created instance of CIM_X509Certificate representing the imported certificate or certificate chain.
IN | boolean | false
OUT | boolean | true
Required | boolean | true
CredentialContext | REF CIM_ManagedElement
Description | string | The managed element that represents the user or owner or the scoping element of the certificate(s). Such managed element could be the web service that owns the certificate(s) or uses it for verification or account that the certificate is scoped to.
IN | boolean | true
Job | REF CIM_ConcreteJob
Description | string | Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
IN | boolean | false
OUT | boolean | true
Keystore | REF CIM_Keystore
Description | string | The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the new certificate or certificate chain will be added.
IN | boolean | true

#### ExportEncodedCertificates (uint32)

#### Method Qualifiers (ExportEncodedCertificates)

Name | Data Type | Value
--- | --- | ---

Description

string

This method is called to export a certificate or a certificate chain using the certificate's encoded representation. Upon successful execution the array of unsigned integers representing octet string of the exported certificate or certificate chain shall be returned inside the EncodedCertificates output parameter based on the encoding specified in the EncodingFormat parameter.

ValueMap | string | 0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

#### Method Parameters (ExportEncodedCertificates)

Name | Type | Qualifiers
--- | --- | ---
Name | Data Type | Value
Format | uint16
Description | string | The Format parameter specifies the format of the octet string EncodedCertificates parameter.
IN | boolean | true
Required | boolean | true
ValueMap | string | 2, 3, 4, 5, .., 32768..65535
Values | string | DER, Base64, PKCS7, PKCS12, DMTF Reserved, Vendor Reserved
EncodedCertificates | string[]
Description | string | An array of strings representing octet string of an exported encoded certificate or certificate chain. Only the first element of the array property shall be populated, even if a certificate chain is exported.
IN | boolean | false
OctetString | boolean | true
OUT | boolean | true
Required | boolean | true
CertificatesToExport | CIM_X509Certificate[]
Description | string | Reference to the instance(s) of CIM_SignedCredential representing the certificate or certificate chain to be exported.
IN | boolean | true
Required | boolean | true
Job | REF CIM_ConcreteJob
Description | string | Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
IN | boolean | false
OUT | boolean | true

#### ApplyCRL (uint32)

#### Method Qualifiers (ApplyCRL)

Name | Data Type | Value
--- | --- | ---

Description

string

This method is called to apply Certificate Revocation List (CRL) using an encoded format. Upon successful execution the references to the instance(s) of CIM_X509CRL representing the applied CRL shall be returned inside the AppliedCRL output parameter. If the Keystore parameter is not NULL, the newly created instance(s) of CIM_X509CRL shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. The newly created instance(s) of the CIM_X509CRL shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association.

ValueMap | string | 0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

#### Method Parameters (ApplyCRL)

Name | Type | Qualifiers
--- | --- | ---
Name | Data Type | Value
Format | uint16
Description | string | The Format shall specify the format for the encoding that is used by octet string EncodedCRL parameter.
IN | boolean | true
Required | boolean | true
ValueMap | string | 2, 3, 4, 5, .., 32768..65535
Values | string | DER, PEM, PKCS7, PKCS12, DMTF Reserved, Vendor Reserved
EncodedCRL | string[]
Description | string | An array of unsigned integers representing octet string of an encoded CRL to be applied. Only the first element of the array property shall be populated.
IN | boolean | true
OctetString | boolean | true
Required | boolean | true
AppliedCRL | REF CIM_X509CRL
Description | string | Reference to the newly created instance of CIM_X509CRL representing the applied CRL.
IN | boolean | false
OUT | boolean | true
Required | boolean | true
CredentialContext | REF CIM_ManagedElement
Description | string | The managed element that represents the service or the managed element for which the certificates were revoked by the application of the CRL.
IN | boolean | true
Required | boolean | true
Job | REF CIM_ConcreteJob
Description | string | Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
IN | boolean | false
OUT | boolean | true
Keystore | REF CIM_Keystore
Description | string | The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the CRL will be applied.
IN | boolean | true

#### ApplyDecodedCRL (uint32)

#### Method Qualifiers (ApplyDecodedCRL)

Name | Data Type | Value
--- | --- | ---

Description

string

This method is called to apply Certificate Revocation List (CRL) using the decoded format. Upon successful execution the references to the instance(s) of CIM_X509CRL representing the applied CRL shall be returned inside the AppliedCRL output parameter. If the Keystore parameter is not NULL, the newly created instance(s) of CIM_X509CRL shall be associated to the instance of the CIM_Keystore referenced in the Keystore parameter. The newly created instance(s) of the CIM_X509CRL shall be associated to the insatnces of CIM_ManagedElement referenced in the CredentialContext property through the CIM_CredentialContext association.

ValueMap | string | 0, 1, 2, 3, 4, 5, 6, .., 4096, 4097..32767, 32768..65535
Values | string | Completed with No Error, Not Supported, Error Occured, Busy, Invalid Reference, Invalid Parameter, Access Denied, DMTF Reserved, Job Started, Method Reserved, Vendor Specified

#### Method Parameters (ApplyDecodedCRL)

Name | Type | Qualifiers
--- | --- | ---
Name | Data Type | Value
Issuer | string
Description | string | Issuer represents the information about the issuer of the CRL. The Issuer property shall contain information as required by section 4.1.2.4 of RFC 3280 and shall be formatted based on RFC 4514. An example of the value of the Subject parameter could be "CN=Marshall T. Rose, O=Dover Beach Consulting, OU=Sales, L=Santa Clara, ST=California, C=US".
DN | boolean | true
IN | boolean | true
Required | boolean | true
SerialNumbers | string[]
Description | string | An array of serial numbers of X.509 certificates that are part of CRL.
IN | boolean | true
OctetString | boolean | true
Required | boolean | true
AppliedCRL | REF CIM_X509CRL
Description | string | Reference to the newly created instance of CIM_X509CRL representing the applied CRL.
IN | boolean | false
OUT | boolean | true
Required | boolean | true
CredentialContext | REF CIM_ManagedElement
Description | string | The managed element that represents the service or the managed element for which the certificates were revoked by the application of the CRL.
IN | boolean | true
Required | boolean | true
Job | REF CIM_ConcreteJob
Description | string | Contains a reference to the ConcreteJob created to track the execution initiated by the method invocation. If the method returns 4096 - job started, then the parameter shall not have NULL value.
IN | boolean | false
OUT | boolean | true
Keystore | REF CIM_Keystore
Description | string | The Keystore parameter denotes the reference to the instance of CIM_Keystore that represents the key store where the CRL will be applied.
IN | boolean | true

### Inherited Class Methods

Name | Return Type | Class Origin
--- | --- | ---
CreateKeystore | uint32 | CIM_KeyBasedCredentialManagementService
ImportPublicPrivateKeyPair | uint32 | CIM_KeyBasedCredentialManagementService
RequestStateChange | uint32 | CIM_EnabledLogicalElement
StartService | uint32 | CIM_Service
StopService | uint32 | CIM_Service