DOCS-SEC-MIB
- Registered at
- 1.3.6.1.4.1.4491.2.1.11
- Last updated
- 2026-08-06 00:00
- Organization
- Cable Television Laboratories, Inc.
- Revisions
- 2026-08-06 00:00, 2026-06-25 00:00, 2026-04-30 00:00, 2025-02-20 00:00, 2024-07-05 00:00, 2023-06-01 00:00, 2022-03-31 00:00, 2021-06-17 00:00, 2021-02-04 00:00, 2020-03-19 00:00, 2016-01-13 00:00, 2015-03-26 00:00, 2010-01-15 00:00, 2009-05-29 00:00, 2007-02-23 00:00, 2006-12-07 17:00
- Namespace
- standard
- Source file
DOCS-SEC-MIB- Digest
sha256:f7b9fc8866f9c391b8feda3b244d3afe7a86350e1d8a60cf9c3f644f513522a0
Description
This MIB module contains the management objects for the management of the security requirements in the DOCSIS Security Specification. Copyright 2006-2026 Cable Television Laboratories, Inc. All rights reserved.
Contact
Postal: Cable Television Laboratories, Inc. 858 Coal Creek Circle Louisville, Colorado 80027-9750 U.S.A. Phone: +1 303-661-9100 Fax: +1 303-661-9199 E-mail: mibs@cablelabs.com
Imports
| From | Symbols |
|---|---|
| CLAB-DEF-MIB | clabProjDocsis |
| DOCS-IETF-BPI2-MIB | DocsX509ASN1DEREncodedCertificate, docsBpi2CmBaseEntry, docsBpi2CodeDownloadControl |
| DOCS-IF3-MIB | docsIf3CmtsCmRegStatusEntry, docsIf3CmtsCmRegStatusId |
| INET-ADDRESS-MIB | InetAddress, InetAddressPrefixLength, InetAddressType |
| SNMP-FRAMEWORK-MIB | SnmpAdminString |
| SNMP-TARGET-MIB | SnmpTagList |
| SNMPv2-CONF | MODULE-COMPLIANCE, NOTIFICATION-GROUP, OBJECT-GROUP |
| SNMPv2-SMI | Counter32, MODULE-IDENTITY, NOTIFICATION-TYPE, OBJECT-IDENTITY, OBJECT-TYPE, Unsigned32, iso |
| SNMPv2-TC | DateAndTime, DisplayString, MacAddress, RowStatus, TEXTUAL-CONVENTION, TruthValue |
Imported by
Nothing in this corpus imports this module.
Load order
Every file a consumer needs in order to load this module, dependencies first.
CLAB-DEF-MIB DIFFSERV-DSCP-TC DIFFSERV-MIB DOCS-CABLE-DEVICE-MIB DOCS-IETF-BPI2-MIB DOCS-IF-MIB DOCS-IF3-MIB DOCS-SEC-MIB IANAifType-MIB IF-MIB INET-ADDRESS-MIB INTEGRATED-SERVICES-MIB RFC1158-MIB RFC1271-MIB RMON-MIB RMON2-MIB SNMP-FRAMEWORK-MIB SNMP-TARGET-MIB SNMPv2-CONF SNMPv2-MIB SNMPv2-SMI SNMPv2-TC TOKEN-RING-RMON-MIB
Textual conventions
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| BpiPlusVer TEXTUAL-CONVENTION Identifies the BPI+ version used by the CM for authentication. 'none' = BPI+ is not used by the CM 'v1' = BPI+V1 'v2' = BPI+V2 | current | |||
| CmAuthKeyEcCurve TEXTUAL-CONVENTION Supported Elliptic-Curve Groups (ECDHE) 'secp256r1' = also known as NIST P-256 curve 'secp384r1' = also known as NIST P-384 curve 'secp521r1'= also known as NIST P-521 curve 'x25519' = curve25519 with Diffie-Hellman key agreement 'x448' = curve448 with Diffie-Hellman key agreement | current | |||
| CmtsBpiVer TEXTUAL-CONVENTION Bitmask indicating which BPI+ versions are enabled on the Cmts. | current | |||
| CmtsDesignationType TEXTUAL-CONVENTION CMTS Device Certificate Data Types 'fingerprint' = this data type is the fingerprint of CMTS Device Certificate. 'cn' = this data type is the Common Name of CMTS Device Certificate. 'ou' = this data type is the Organizational Unit of CMTS Device Certificate. 'on' = this data type is the Organization Name of CMTS Device Certificate. 'serialNum' = this data type is the serial number of CMTS Device Certificate. 'caFingerprint' = this data type is the fingerprint of CMTS Device CA Certificate. 'caCN' = this data type is the Common Name of CMTS Device CA Certificate. 'caOU' = this data type is the Organizational Unit of CMTS Device CA Certificate. 'caON' = this data type is the Organization Name of CMTS Device CA Certificate. 'caSerialNum' = this data type is the serial number of CMTS Device CA Certificate. | current | |||
| DocsCvcCaCertificateChain TEXTUAL-CONVENTION A degenerate PKCS7 signedData structure that contains the CVC and the CVC CA certificate chain in the certificates field. | current |
Objects
| Name | OID | Syntax | Access | Status |
|---|---|---|---|---|
| docsBpi2CodeUpdateCvcChain OBJECT-TYPE The value of this object is a degenerate PKCS7 signedData structure that contains the CVC and the CVC CA certificate chain in the certificates field. Setting this object triggers the device to verify the CVC and update the cvcAccessStart values. The content of this object is then discarded. If the device is not enabled to upgrade codefiles, or if the CVC verification fails, the CVC will be rejected. Reading this object always returns the zero-length OCTET STRING. | 1.3.6.1.2.1.126.1.4.10 | DocsCvcCaCertificateChain | read-write | deprecated |
| docsSecMibObjects OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1 | |||
| docsSecCmtsServerCfg OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.1 | |||
| docsSecCmtsServerCfgTftpOptions OBJECT-TYPE This attribute instructs the CMTS to insert the source IP address and/or MAC address of received TFTP packets into the TFTP option fields before forwarding the packets to the Config File server. This attribute is only applicable when the TftpProxyEnabled attribute of the MdCfg object is 'true'. | 1.3.6.1.4.1.4491.2.1.11.1.1.1 | Bits {hwAddr(0), netAddr(1)} | read-write | current |
| docsSecCmtsServerCfgConfigFileLearningEnable OBJECT-TYPE This attribute enables and disables Configuration File Learning functionality. If this attribute is set to 'true' the CMTS will respond with Authentication Failure in the REG-RSP message when there is a mismatch between learned config file parameters and REG-REQ parameters. If this attribute is set to 'false', the CMTS will not execute config file learning and mismatch check. This attribute is only applicable when the TftpProxyEnabled attribute of the MdCfg object is 'true'. | 1.3.6.1.4.1.4491.2.1.11.1.1.2 | TruthValue | read-write | current |
| docsSecCmtsEncrypt OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.2 | |||
| docsSecCmtsEncryptEncryptAlgPriority OBJECT-TYPE This attribute allows for configuration of a prioritized list of encryption algorithms the CMTS will use when selecting the primary SAID encryption algorithm for a given CM. The CMTS selects the encryption algorithm with the highest security level from this ordered list that the CM and the CMTS supports. The support of AES-256 is optional. If the CMTS supports AES-256, by default, the following encryption algorithms are listed: 256-bit AES, 128-bit AES, 56-bit DES, 40-bit DES If the CMTS does not support AES-256, by default, the following encryption algorithms are listed: 128-bit AES, 56-bit DES, 40-bit DES | 1.3.6.1.4.1.4491.2.1.11.1.2.1 | SnmpTagList | read-write | current |
| docsSecCmtsCmEaeExclusionTable OBJECT-TYPE This object defines a list of CMs or CM groups to exclude from Early Authentication and Encryption (EAE). This object allows overrides to the value of EAE Control for individual CMs or group of CMs for purposes such as debugging. The CMTS supports a minimum of 30 instances of the CmtsCmEaeExclusion object. This object is only applicable when the EarlyAuthEncryptCtrl attribute of the MdCfg object is enabled. This object supports the creation and deletion of multiple instances. | 1.3.6.1.4.1.4491.2.1.11.1.3 | not-accessible | current | |
| docsSecCmtsCmEaeExclusionEntry OBJECT-TYPE The conceptual row of docsSecCmtsCmEaeExclusion. The CMTS persists all instances of CmtsCmEaeExclusion across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.3.1 | not-accessible | current | |
| docsSecCmtsCmEaeExclusionId OBJECT-TYPE This key uniquely identifies the exclusion MAC address rule. | 1.3.6.1.4.1.4491.2.1.11.1.3.1.1 | Unsigned32 (1..4294967295) | not-accessible | current |
| docsSecCmtsCmEaeExclusionMacAddr OBJECT-TYPE This attribute identifies the CM MAC address. A match is made when a CM MAC address bitwise ANDed with the MacAddrMask attribute equals the value of this attribute. | 1.3.6.1.4.1.4491.2.1.11.1.3.1.2 | MacAddress | read-create | current |
| docsSecCmtsCmEaeExclusionMacAddrMask OBJECT-TYPE This attribute identifies the CM MAC address mask and is used with the MacAddr attribute. | 1.3.6.1.4.1.4491.2.1.11.1.3.1.3 | MacAddress | read-create | current |
| docsSecCmtsCmEaeExclusionRowStatus OBJECT-TYPE Controls and reflects the status of rows in this table. There is no restriction on changing values in a row of this table while the row is active. | 1.3.6.1.4.1.4491.2.1.11.1.3.1.4 | RowStatus | read-create | current |
| docsSecCmtsSavControl OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.4 | |||
| docsSecCmtsSavControlCmAuthEnable OBJECT-TYPE This attribute enables or disables Source Address Verification (SAV) for CM configured policies in the SavCmAuth object. If this attribute is set to 'false', the CM configured policies in the SavCmAuth object are ignored. This attribute is only applicable when the SrcAddrVerificationEnabled attribute of the MdCfg object is 'true'. | 1.3.6.1.4.1.4491.2.1.11.1.4.1 | TruthValue | read-write | current |
| docsSecSavCmAuthTable OBJECT-TYPE This object defines a read-only set of SAV policies associated with a CM that the CMTS will use in addition to the CMTS verification of an operator assigned IP Address being associated with a CM. When the CMTS has not resolved a source address of a CM CPE, the CMTS verifies if the CM CPE is authorized to pass traffic based on this object. These object policies include a list of subnet prefixes (defined in the SavStaticList object) or a SAV Group Name that could reference a CMTS configured list of subnet prefixes (defined in SavCfgList object) or vendor-specific policies. The CMTS populates the attributes of this object for a CM from that CM's config file. This object is only applicable when the SrcAddrVerificationEnabled attribute of the MdCfg object is 'true' and the CmAuthEnable attribute of the CmtsSavCtrl object is 'true'. The CMTS is not required to persist instances of this object across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.5 | not-accessible | current | |
| docsSecSavCmAuthEntry OBJECT-TYPE The conceptual row of docsSecSavCmAuth. | 1.3.6.1.4.1.4491.2.1.11.1.5.1 | not-accessible | current | |
| docsSecSavCmAuthGrpName OBJECT-TYPE This attribute references the Name attribute of the SavCfgList object of a CM. If the CM signaled group name is not configured in the CMTS, the CMTS ignores this attribute value for the purpose of Source Address Verification. The CMTS must allow the modification of the GrpName object and use the updated SAV rules for newly discovered CPEs from CMs. When a source IP address is claimed by two CMs (e.g., detected as duplicated), the CMTS must use the current SAV rules defined for both CMs in case the SAV GrpName rules may have been updated. In the case of a persisting conflict, it is up to vendor-implementation to decide what CM should hold the SAV authorization. The zero-length string indicates that no SAV Group was signaled by the CM. The zero-length value or a non-existing reference in the SavCfgList object means the SavCfgListName is ignored for the purpose of SAV. | 1.3.6.1.4.1.4491.2.1.11.1.5.1.1 | SnmpAdminString | read-only | current |
| docsSecSavCmAuthStaticPrefixListId OBJECT-TYPE This attribute identifies the reference to a CMTS created subnet prefix list based on the CM signaled static prefix list TLV elements. The CMTS may reuse this attribute value to reference more than one CM when those CMs have signaled the same subnet prefix list to the CMTS. The value zero indicates that no SAV static prefix encodings were signaled by the CM. | 1.3.6.1.4.1.4491.2.1.11.1.5.1.2 | Unsigned32 | read-only | current |
| docsSecSavCfgListTable OBJECT-TYPE This object defines the CMTS configured subnet prefix extension to the SavCmAuth object. This object supports the creation and deletion of multiple instances. Creation of a new instance of this object requires the PrefixAddrType and PrefixAddr attributes to be set. | 1.3.6.1.4.1.4491.2.1.11.1.6 | not-accessible | current | |
| docsSecSavCfgListEntry OBJECT-TYPE The conceptual row of docsSecSavCfgList. The CMTS persists all instances of SavCfgList across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.6.1 | not-accessible | current | |
| docsSecSavCfgListName OBJECT-TYPE This attribute is the key that identifies the instance of the SavCmAuth object to which this object extension belongs. | 1.3.6.1.4.1.4491.2.1.11.1.6.1.1 | SnmpAdminString (SIZE(1..16)) | not-accessible | current |
| docsSecSavCfgListRuleId OBJECT-TYPE This attribute is the key that identifies a particular subnet prefix rule of an instance of this object. | 1.3.6.1.4.1.4491.2.1.11.1.6.1.2 | Unsigned32 (1..4294967295) | not-accessible | current |
| docsSecSavCfgListPrefixAddrType OBJECT-TYPE This attribute identifies the IP address type of this subnet prefix rule. | 1.3.6.1.4.1.4491.2.1.11.1.6.1.3 | InetAddressType | read-create | current |
| docsSecSavCfgListPrefixAddr OBJECT-TYPE This attribute corresponds to the IP address of this subnet prefix rule in accordance to the PrefixAddrType attribute. | 1.3.6.1.4.1.4491.2.1.11.1.6.1.4 | InetAddress | read-create | current |
| docsSecSavCfgListPrefixLen OBJECT-TYPE This attribute defines the length of the subnet prefix to be matched by this rule. | 1.3.6.1.4.1.4491.2.1.11.1.6.1.5 | InetAddressPrefixLength | read-create | current |
| docsSecSavCfgListRowStatus OBJECT-TYPE The row creation control of this conceptual row. An entry in this table can be set to active only when the following attributes are correctly assigned: PrefixAddrType PrefixAddress There are no restrictions to modify or delete entries in this table. | 1.3.6.1.4.1.4491.2.1.11.1.6.1.6 | RowStatus | read-create | current |
| docsSecSavStaticListTable OBJECT-TYPE This object defines a subnet prefix extension to the SavCmAuth object based on CM statically signaled subnet prefixes to the CMTS. When a CM signals to the CMTS static subnet prefixes, the CMTS must create a List Id to be referenced by the CM in the SavCmAuth StaticPrefixListId attribute, or the CMTS may reference an existing List Id associated to previously registered CMs in case of those subnet prefixes associated with the List Id match the ones signaled by the CM. | 1.3.6.1.4.1.4491.2.1.11.1.7 | not-accessible | current | |
| docsSecSavStaticListEntry OBJECT-TYPE The conceptual row of docsSecSavStaticList. The CMTS may persist instances of this object across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.7.1 | not-accessible | current | |
| docsSecSavStaticListId OBJECT-TYPE This key uniquely identifies the index that groups multiple subnet prefix rules. The CMTS assigns this value per CM or may reuse it among multiple CMs that share the same list of subnet prefixes. | 1.3.6.1.4.1.4491.2.1.11.1.7.1.1 | Unsigned32 (1..4294967295) | not-accessible | current |
| docsSecSavStaticListRuleId OBJECT-TYPE This key identifies a particular static subnet prefix rule of an instance of this object. | 1.3.6.1.4.1.4491.2.1.11.1.7.1.2 | Unsigned32 (1..4294967295) | not-accessible | current |
| docsSecSavStaticListPrefixAddrType OBJECT-TYPE This attribute identifies the IP address type of this subnet prefix rule. | 1.3.6.1.4.1.4491.2.1.11.1.7.1.3 | InetAddressType | read-only | current |
| docsSecSavStaticListPrefixAddr OBJECT-TYPE This attribute corresponds to the IP address of this subnet prefix rule in accordance to the PrefixAddrType attribute. | 1.3.6.1.4.1.4491.2.1.11.1.7.1.4 | InetAddress | read-only | current |
| docsSecSavStaticListPrefixLen OBJECT-TYPE This attribute defines the length of the subnet prefix to be matched by this rule. | 1.3.6.1.4.1.4491.2.1.11.1.7.1.5 | InetAddressPrefixLength | read-only | current |
| docsSecCmtsCmSavStatsTable OBJECT-TYPE This object provides a read-only list of SAV counters for different service theft indications. | 1.3.6.1.4.1.4491.2.1.11.1.8 | not-accessible | current | |
| docsSecCmtsCmSavStatsEntry OBJECT-TYPE The conceptual row of docsSecCmtsCmSavStats. | 1.3.6.1.4.1.4491.2.1.11.1.8.1 | not-accessible | current | |
| docsSecCmtsCmSavStatsSavDiscards OBJECT-TYPE This attribute provides the information about number of dropped upstream packets due to SAV failure. | 1.3.6.1.4.1.4491.2.1.11.1.8.1.1 | Counter32 | read-only | current |
| docsSecCmtsCertificate OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.9 | |||
| docsSecCmtsCertificateCertRevocationMethod OBJECT-TYPE This attribute identifies which certificate revocation method is to be used by the CMTS to verify the cable modem certificate validity. The certificate revocation methods include Certification Revocation List (CRL) and Online Certificate Status Protocol (OCSP). The following options are available: The option 'none' indicates that the CMTS does not attempt to determine the revocation status of a certificate. The option 'crl' indicates the CMTS uses a Certificate Revocation List (CRL) as defined by the Url attribute of the CmtsCertRevocationList object. When the value of this attribute is changed to 'crl', it triggers the CMTS to retrieve the CRL from the URL specified by the Url attribute. If the value of this attribute is 'crl' when the CMTS starts up, it triggers the CMTS to retrieve the CRL from the URL specified by the Url attribute. The option 'ocsp' indicates the CMTS uses the Online Certificate Status Protocol (OCSP) as defined by the Url attribute of the CmtsOnlineCertStatusProtocol object. The option 'crlAndOcsp' indicates the CMTS uses both the CRL as defined by the Url attribute in the CmtsCertRevocationList object and OCSP as defined by the Url attribute in the CmtsOnlineCertStatusProtocol object. The CMTS persists the values of the CertRevocationMethod attribute across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.9.1 | INTEGER {none(1), crl(2), ocsp(3), crlAndOcsp(4)} | read-write | current |
| docsSecCmtsCertRevocationList OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.10 | |||
| docsSecCmtsCertRevocationListUrl OBJECT-TYPE This attribute contains the URL from where the CMTS will retrieve the CRL. When this attribute is set to a URL value different from the current value, it triggers the CMTS to retrieve the CRL from that URL. If the value of this attribute is a zero-length string, the CMTS does not attempt to retrieve the CRL. The CMTS persists the value of Url across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.10.1 | SnmpAdminString | read-write | current |
| docsSecCmtsCertRevocationListRefreshInterval OBJECT-TYPE This attribute contains the refresh interval for the CMTS to retrieve the CRL (referred to in the Url attribute) with the purpose of updating its Certificate Revocation List. This attribute is meaningful if the tbsCertList.nextUpdate attribute does not exist in the last retrieved CRL, otherwise the value 0 is returned. The CMTS persists the value of RefreshInterval across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.10.2 | Unsigned32 (1..524160) | read-write | current |
| docsSecCmtsCertRevocationListLastUpdate OBJECT-TYPE This attribute contains the last date and time when the CRL was retrieved by the CMTS. If the CRL has not been updated, then this variable shall have the value corresponding to January 1, year 0000, 00:00:00.0, which is encoded as (hex)'00 00 01 01 00 00 00 00'. | 1.3.6.1.4.1.4491.2.1.11.1.10.3 | DateAndTime | read-only | current |
| docsSecCmtsOnlineCertStatusProtocol OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.11 | |||
| docsSecCmtsOnlineCertStatusProtocolUrl OBJECT-TYPE This attribute contains the URL string to retrieve OCSP information. If the value of this attribute is a zero-length string, the CMTS does not attempt to request the status of a CM certificate. The CMTS persists the value of Url across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.11.1 | SnmpAdminString | read-write | current |
| docsSecCmtsOnlineCertStatusProtocolSignatureBypass OBJECT-TYPE This attribute enables or disables signature checking on OCSP response messages. The CMTS persists the value of SignatureBypass across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.11.2 | TruthValue | read-write | current |
| docsSecCmtsCmBpi2EnforceExclusionTable OBJECT-TYPE This object defines a list of CMs or CM groups to exclude from BPI+ enforcement policies configured within the CMTS. This object allows overrides to the value of BPI+ enforcement control for individual CMs or group of CMs for purposes such as debugging. The CMTS supports a minimum of 30 instances of the CmtsCmBpi2EnforceExclusion object. This object supports the creation and deletion of multiple instances. | 1.3.6.1.4.1.4491.2.1.11.1.12 | not-accessible | current | |
| docsSecCmtsCmBpi2EnforceExclusionEntry OBJECT-TYPE The conceptual row of docsSecCmtsCmBpi2EnforceExclusion. The CMTS persists all instances of CmtsCmBpi2EnforceExclusion across reinitializations. | 1.3.6.1.4.1.4491.2.1.11.1.12.1 | not-accessible | current | |
| docsSecCmtsCmBpi2EnforceExclusionId OBJECT-TYPE This key uniquely identifies the exclusion MAC address rule. | 1.3.6.1.4.1.4491.2.1.11.1.12.1.1 | Unsigned32 (1..4294967295) | not-accessible | current |
| docsSecCmtsCmBpi2EnforceExclusionMacAddr OBJECT-TYPE This attribute identifies the CM MAC address. A match is made when a CM MAC address bitwise ANDed with the MacAddrMask attribute equals the value of this attribute. | 1.3.6.1.4.1.4491.2.1.11.1.12.1.2 | MacAddress | read-create | current |
| docsSecCmtsCmBpi2EnforceExclusionMacAddrMask OBJECT-TYPE This attribute identifies the CM MAC address mask and is used with the MacAddr attribute. | 1.3.6.1.4.1.4491.2.1.11.1.12.1.3 | MacAddress | read-create | current |
| docsSecCmtsCmBpi2EnforceExclusionRowStatus OBJECT-TYPE Controls and reflects the status of rows in this table. There is no restriction on changing values in a row of this table while the row is active. | 1.3.6.1.4.1.4491.2.1.11.1.12.1.4 | RowStatus | read-create | current |
| docsSecCmSshKeyManagement OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.13 | |||
| docsSecCmSshServer OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.13.1 | |||
| docsSecCmSshServerEnabledInterfaces OBJECT-TYPE This attribute reports whether SSH server function is enabled in the CM. The CM is required to disable SSH server function by default. The possible values for this attribute are listed below: Bit 0 'operatorFacing' CM allows access only from all network private interfaces,addresses (i.e., operator's network). | 1.3.6.1.4.1.4491.2.1.11.1.13.1.1 | Bits {operatorFacing(0)} | read-write | current |
| docsSecCmSshServerStatus OBJECT-TYPE This attribute reports the status of the connection between the CM SSH server and the SSH client. The possible values for this attribute are defined in RFC 4253 and are listed below: 'disconnectedNotAllowed' SSH client is not allowed to connect to the host 'disconnectedProtocolError' SSH client disconnected because of SSH protocol error 'disconnectedKeyExchangeFailed' SSH client disconnected because the SSH key exchange failed at the SSH transport layer 'disconnectedReserved' Value reserved for future use 'disconnectedMacError' SSH client disconnected due to the incompatibility of the Message Authentication code algorithm or value 'disconnectedCompressionError' SSH client disconnected due to the failure of compression on the packet payload when it is required or the incompatibility of the compression algorithm exists 'disconnectedServiceNotAvailable' SSH client disconnected because SSH service is not available on the server 'disconnectedProtocolVersionNotSupported' SSH client disconnected because the SSH protocol version is not supported by the server 'disconnectedHostKeyNotVerifiable' SSH client disconnected because of using an unverifiable host key. 'disconnectedConnectionLost' SSH client disconnected because of inactivity 'disconnectedByApplication' SSH server disconnected by the SCCA application when performing the TLS-based Authentication 'disconnectedTooManyConnections' SSH client disconnected because the connections limitation has been exceeded 'disconnectedAuthCancelledByUser' SSH client disconnected because the authentication is cancelled by the user 'disconnectedNoMoreAuthMethods' SSH client disconnected because no more authentication methods are available 'disconnectedIllegalUserName' SSH client disconnected because of an illegal username 'connected' Connection between the CM SSH server and the SSH client is active 'disconnectedUnknown' SSH client disconnected for unknown or other reason | 1.3.6.1.4.1.4491.2.1.11.1.13.1.2 | INTEGER {disconnectedNotAllowed(1), disconnectedProtocolError(2), disconnectedKeyExchangeFailed(3), disconnectedReserved(4), disconnectedMacError(5), disconnectedCompressionError(6), disconnectedServiceNotAvailable(7), disconnectedProtocolVersionNotSupported(8), disconnectedHostKeyNotVerifiable(9), disconnectedConnectionLost(10), disconnectedByApplication(11), disconnectedTooManyConnections(12), disconnectedAuthCancelledByUser(13), disconnectedNoMoreAuthMethods(14), disconnectedIllegalUserName(15), connected(16), disconnectedUnknown(17)} | read-only | current |
| docsSecCmSshServerPublicKey OBJECT-TYPE This attribute is the authorized SSH client public key used by the CM to authenticate the client when the client attempts to set up a CLI SSH connection. | 1.3.6.1.4.1.4491.2.1.11.1.13.1.3 | OCTET STRING | read-only | current |
| docsSecCmSshServerNewConnectionTimeout OBJECT-TYPE This attribute is the new SSH connection timeout provisioned on the CM. When this timeout value is reached, the CM sets the Enabled attribute to 'false' and stops accepting new SSH connections. Established connections remain active. | 1.3.6.1.4.1.4491.2.1.11.1.13.1.4 | Unsigned32 (0..28800) | read-write | current |
| docsSecCmSshServerInactivityTimeout OBJECT-TYPE This attribute is the SSH inactivity timeout provisioned on the CM. This attribute represents the time at which an established connection is terminated if there is no activity. Inactivity is defined as the remote side of the connection timing out and disconnecting. If this attribute is set to zero, the inactivity timeout will be implementation specific. | 1.3.6.1.4.1.4491.2.1.11.1.13.1.5 | Unsigned32 (0..65535) | read-write | current |
| docsSecCmSshServerSshSourceAddrRestrictionType OBJECT-TYPE The type of internet address associated to the SSH source address restriction. | 1.3.6.1.4.1.4491.2.1.11.1.13.1.6 | InetAddressType | read-write | current |
| docsSecCmSshServerSshSourceAddrRestriction OBJECT-TYPE This optional attribute is the SSH source address restriction provisioned on the CM. When this attribute is not present, the CM enables unrestricted access to the SSH server. | 1.3.6.1.4.1.4491.2.1.11.1.13.1.7 | InetAddress | read-write | current |
| docsSecCmSshServerSshSourcePrefixRestriction OBJECT-TYPE This optional attribute is the SSH source address prefix restriction provisioned on the CM. This attribute is a network, address specifier in CIDR notation that limits the IP addresses where SSH connections can originate. | 1.3.6.1.4.1.4491.2.1.11.1.13.1.8 | InetAddressPrefixLength | read-write | current |
| docsSecCmCdsFileServer OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.13.2 | |||
| docsSecCmCdsFileServerIpAddrType OBJECT-TYPE This attribute indicates the type of the Internet address for IpAddr. | 1.3.6.1.4.1.4491.2.1.11.1.13.2.1 | InetAddressType | read-write | current |
| docsSecCmCdsFileServerIpAddr OBJECT-TYPE This attribute is the Internet address of the CDS server in the operator's network. | 1.3.6.1.4.1.4491.2.1.11.1.13.2.2 | InetAddress | read-write | current |
| docsSecCmCdsFileServerSshCmCdsDownloadUrl OBJECT-TYPE This attribute is the URL of the CDS server in the operator's network. | 1.3.6.1.4.1.4491.2.1.11.1.13.2.3 | OCTET STRING (SIZE(0..2048)) | read-write | current |
| docsSecCmCdsFileServerRevocationStatusAction OBJECT-TYPE This attribute is the action taken by the CM if it does not receive revocation status from the provisioning system server. The possible values for this object are listed below: 'continue' Continue operation with the CDS server 'reject' Reject the connection with the CDS server | 1.3.6.1.4.1.4491.2.1.11.1.13.2.4 | INTEGER {continue(0), reject(1)} | read-write | current |
| docsSecCmSshCmCds OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.13.3 | |||
| docsSecCmPasswordCredentialTable OBJECT-TYPE The PasswordCredential table contains authorized password credential information for the CM to authenticate SSH Client CLI connections. The CM supports creation of new instances of the PasswordCredential object and deletion of existing PasswordCredential object instances. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.1 | not-accessible | current | |
| docsSecCmPasswordCredentialEntry OBJECT-TYPE The conceptual row of docsSecCmPasswordCredentialTable. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.1.1 | not-accessible | current | |
| docsSecCmPasswordCredentialIndex OBJECT-TYPE This key attribute represents the unique identifier of an instance of this object. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.1.1.1 | Unsigned32 (1..4294967295) | not-accessible | current |
| docsSecCmPasswordCredentialUserId OBJECT-TYPE This attribute is the identifier of the user for which the password credential is to be evaluated. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.1.1.2 | SnmpAdminString | read-create | current |
| docsSecCmPasswordCredentialPassword OBJECT-TYPE This attribute is a string encoded in the [ISO 8859-1] character-set and using characters in the range from 0x21 to 0x7E serving as the credential to be evaluated for the user. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.1.1.3 | OCTET STRING (SIZE(8..128)) | read-create | current |
| docsSecCmPasswordCredentialMacAddr OBJECT-TYPE This optional attribute is the MAC address assigned to the CM. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.1.1.4 | MacAddress | read-create | current |
| docsSecCmPasswordCredentialRowStatus OBJECT-TYPE Controls and reflects the status of rows in this table. There is no restriction on changing values in a row of this table while the row is active. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.1.1.5 | RowStatus | read-create | current |
| docsSecCmPublicKeyCredentialTable OBJECT-TYPE The PublicKeyCredential table contains authorized RSA Public Key credential information for the CM to authenticate SSH Client CLI connections. The CM supports creation of new instances of the PublicKeyCredential object and deletion of existing PublicKeyCredential object instances. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.2 | not-accessible | current | |
| docsSecCmPublicKeyCredentialEntry OBJECT-TYPE The conceptual row of docsSecCmPublicKeyCredentialTable. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.2.1 | not-accessible | current | |
| docsSecCmPublicKeyCredentialIndex OBJECT-TYPE This key attribute represents the unique identifier of an instance of this object. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.2.1.1 | Unsigned32 (1..4294967295) | not-accessible | current |
| docsSecCmPublicKeyCredentialUserId OBJECT-TYPE This attribute is the identifier of the user for which the PublicKey credential is to be evaluated. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.2.1.2 | SnmpAdminString | read-create | current |
| docsSecCmPublicKeyCredentialSshPublicKey OBJECT-TYPE This attribute is a string containing a DER-encoded RSA PublicKey or ECDSA public keys in ASN.1 type, as defined in [X.509] and serving as the credential to be evaluated for the user. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.2.1.3 | OCTET STRING (SIZE(256..512)) | read-create | current |
| docsSecCmPublicKeyCredentialMacAddr OBJECT-TYPE This optional attribute is the MAC address assigned to the CM. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.2.1.4 | MacAddress | read-create | current |
| docsSecCmPublicKeyCredentialRowStatus OBJECT-TYPE Controls and reflects the status of rows in this table. There is no restriction on changing values in a row of this table while the row is active. | 1.3.6.1.4.1.4491.2.1.11.1.13.3.2.1.5 | RowStatus | read-create | current |
| docsSecCmSccaServerCfg OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.13.4 | |||
| docsSecCmSccaServerCfgIpAddrType OBJECT-TYPE This attribute indicates the type of the Internet address for IpAddr. | 1.3.6.1.4.1.4491.2.1.11.1.13.4.1 | InetAddressType | read-write | current |
| docsSecCmSccaServerCfgIpAddr OBJECT-TYPE This attribute is the Internet address of the CDS server in the operator's network. | 1.3.6.1.4.1.4491.2.1.11.1.13.4.2 | InetAddress | read-write | current |
| docsSecCmSccaServerCfgRestApiUrl OBJECT-TYPE This attribute is the URL of the SCCA REST API to validate the user credentials. | 1.3.6.1.4.1.4491.2.1.11.1.13.4.3 | OCTET STRING (SIZE(0..2048)) | read-write | current |
| docsSecCmSccaServerCfgRevocationStatusAction OBJECT-TYPE This attribute configures the action taken by the CM if it does not receive revocation status from the HTTPS server. The possible values for this object are listed below: 'continue' Continue operation with the HTTPS server 'reject' Reject the connection with the HTTPS server | 1.3.6.1.4.1.4491.2.1.11.1.13.4.4 | INTEGER {continue(0), reject(1)} | read-write | current |
| docsSecBpiPlusBaseManagement OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.14 | |||
| docsSecBpiPlusBaseTable OBJECT-TYPE The BpiPlusBase object describes the basic and authorization-related BPI+ attributes. | 1.3.6.1.4.1.4491.2.1.11.1.14.1 | not-accessible | current | |
| docsSecBpiPlusBaseEntry OBJECT-TYPE The conceptual row of docsSecBpiPlusBase. | 1.3.6.1.4.1.4491.2.1.11.1.14.1.1 | not-accessible | current | |
| docsSecBpiPlusBaseCmAuthStatusInfo OBJECT-TYPE The value of this attribute is the number of times the CM has transmitted an Authentication Status Info message. This attribute is for BPI+V2 mode only. For a non-BPI+V2 CM, the value of this attribute needs to be '0'. If this is a BPI+V2 CM, this attribute needs to be a non-zero value. The value of this attribute is not preserved after the CM power-cycles or resets. | 1.3.6.1.4.1.4491.2.1.11.1.14.1.1.1 | Unsigned32 (0..255) | read-only | current |
| docsSecBpiPlusBaseCmBpiPlusVer OBJECT-TYPE The value of this attribute shows the BPI+ version used by the CM for authentication. | 1.3.6.1.4.1.4491.2.1.11.1.14.1.1.2 | BpiPlusVer | read-only | current |
| docsSecBpiPlusV2Cfg OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.14.2 | |||
| docsSecBpiPlusV2CfgCmAuthKeyEcCurve OBJECT-TYPE The value of this attribute is the supported Elliptic-Curve Groups (ECDHE) for CM to generate an EC Auth Key while in BPI+V2 mode. | 1.3.6.1.4.1.4491.2.1.11.1.14.2.1 | CmAuthKeyEcCurve | read-only | current |
| docsSecCmtsDesignationCfgTable OBJECT-TYPE The CmtsDesignationCfg table contains information the CM uses to provide rules to bind a CM to a CMTS. Multiple rules can be added to provide the level of granularity desired. | 1.3.6.1.4.1.4491.2.1.11.1.14.2.2 | not-accessible | current | |
| docsSecCmtsDesignationCfgEntry OBJECT-TYPE The conceptual row of docsSecCmtsDesignationCfg. | 1.3.6.1.4.1.4491.2.1.11.1.14.2.2.1 | not-accessible | current | |
| docsSecCmtsDesignationCfgIndex OBJECT-TYPE This index attribute represents the unique identifier of an instance of this object. | 1.3.6.1.4.1.4491.2.1.11.1.14.2.2.1.1 | Unsigned32 (0..255) | not-accessible | current |
| docsSecCmtsDesignationCfgCmtsDesignationType OBJECT-TYPE The value of this attribute indicates the type of data in the certificates to be checked for CM at the next authorization session. | 1.3.6.1.4.1.4491.2.1.11.1.14.2.2.1.2 | CmtsDesignationType | read-write | current |
| docsSecCmtsDesignationCfgCmtsDesignationAttr OBJECT-TYPE The value of this attribute is used when checking the value of specified data type for CM at the next authorization session. | 1.3.6.1.4.1.4491.2.1.11.1.14.2.2.1.3 | OCTET STRING (SIZE(0..128)) | read-write | current |
| docsSecTrustOnFirstUseCfg OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.14.2.3 | |||
| docsSecTrustOnFirstUseCfgAllowedBpiVers OBJECT-TYPE This attribute configures which BPI+ version the CM supported in subsequent connections. If the 'bpiPlusV1' bit (bit 0) is set to '1', the CM only uses BPI+V1 to connect to a CMTS. If the 'bpiPlusV2' bit (bit 1) is set to '1', the CM only uses BPI+V2 to connect to a CMTS. If both Bit 0 and Bit 1 are set, the CM allows access from both BPI+V1 and BPI+V2 to connect to a CMTS. | 1.3.6.1.4.1.4491.2.1.11.1.14.2.3.1 | Bits {bpiPlusV1(0), bpiPlusV2(1)} | read-write | current |
| docsSecCertificateManagement OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.15 | |||
| docsSecCmIntermediateCaCert OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.15.1 | |||
| docsSecCmIntermediateCaCertDocs30IntCaCert OBJECT-TYPE This attribute represents the X509 DER-encoded Manufacturer CA certificate that signed the DOCSIS 3.0 CM Device Certificate. | 1.3.6.1.4.1.4491.2.1.11.1.15.1.1 | DocsX509ASN1DEREncodedCertificate | read-only | current |
| docsSecCmIntermediateCaCertIntCaCert OBJECT-TYPE This attribute represents the X509 DER-encoded Device CA Certificate that signed the DOCSIS 3.1/4.0 CM Device Certificate. | 1.3.6.1.4.1.4491.2.1.11.1.15.1.2 | DocsX509ASN1DEREncodedCertificate | read-only | current |
| docsSecCmtsTrustAnchorCert OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.15.2 | |||
| docsSecCmtsTrustAnchorCertDeviceId OBJECT-TYPE This attribute represents the unique device identifier of an instance of this object. It should match the value presented in the CN field of the CMTS Device Certificate (e.g., FQDN or the Device MAC address). | 1.3.6.1.4.1.4491.2.1.11.1.15.2.1 | OCTET STRING | read-only | current |
| docsSecCmtsTrustAnchorCertCaCert OBJECT-TYPE This attribute represents the X509 DER-encoded Root CA certificate that signed the CMTS Device CA Certificate. | 1.3.6.1.4.1.4491.2.1.11.1.15.2.2 | DocsX509ASN1DEREncodedCertificate | read-only | current |
| docsSecLearnedCmtsCert OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.15.3 | |||
| docsSecLearnedCmtsCertDeviceId OBJECT-TYPE This attribute represents the unique device identifier of an instance of this object. It should match the value presented in the CN field of the CMTS Device Certificate (e.g., FQDN or the Device MAC address). | 1.3.6.1.4.1.4491.2.1.11.1.15.3.1 | OCTET STRING | read-only | current |
| docsSecLearnedCmtsCertDeviceCert OBJECT-TYPE This attribute represents the X509 DER-encoded DOCSIS 4.0 CMTS Device Certificate. | 1.3.6.1.4.1.4491.2.1.11.1.15.3.2 | DocsX509ASN1DEREncodedCertificate | read-only | current |
| docsSecCmCertRevocationCfg OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.15.4 | |||
| docsSecCmCertRevocationCfgMethod OBJECT-TYPE This attribute indicates the used method for performing the revocation checking. 'none' = Revocation checking is disabled on the CM. 'ocsp' = Use OCSP for revocation checking. | 1.3.6.1.4.1.4491.2.1.11.1.15.4.1 | INTEGER {none(1), ocsp(2)} | read-write | current |
| docsSecCmOnlineCertStatusProtocolCfg OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.15.4.2 | |||
| docsSecCmOnlineCertStatusProtocolCfgCache OBJECT-TYPE This attribute indicates the cached OCSP status used by CM. If the value of CmCertRevocationCfg::Method is 'none', the CM does not need to check this attribute. 'none' = No OCSP cache. 'good' = Certificates in received CMTS certificate chain is not revoked. 'revoked' = At least one certificate in received CMTS certificate chain is revoked. 'unknown' = unknown revocation status. | 1.3.6.1.4.1.4491.2.1.11.1.15.4.2.1 | INTEGER {none(1), good(2), revoked(3), unknown(4)} | read-write | current |
| docsSecCmOnlineCertStatusProtocolCfgRefreshInterval OBJECT-TYPE This attribute indicates the refresh interval (minutes) for the cached OCSP status used by the CM. If the value of CmCertRevocationCfg::Method is 'none', the CM does not need to check this attribute | 1.3.6.1.4.1.4491.2.1.11.1.15.4.2.2 | Unsigned32 (1..524160) | read-write | current |
| docsSecCmOnlineCertStatusProtocolCfgUrl OBJECT-TYPE This attribute is the URL for OCSP communications in checking a certificate's revocation status. This attribute configures the CM with a URL string to retrieve OCSP information. If the value of this attribute is a zero-length string, the CM does not need to check the revocation status of a CMTS Device Certificate. If the value of CmCertRevocationCfg::Method is 'none', the CM does not need to check this attribute. | 1.3.6.1.4.1.4491.2.1.11.1.15.4.2.3 | OCTET STRING (SIZE(0..2048)) | read-write | current |
| docsSecCmtsCert OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.16 | |||
| docsSecCmtsCertD30RootCaCert OBJECT-TYPE This attribute represents the X509 DER-encoded DOCSIS 3.0 Root CA certificate that signed the Manufacturer CA certificates (1st GEN DOCSIS (R) PKI or legacy PKI). | 1.3.6.1.4.1.4491.2.1.11.1.16.1 | DocsX509ASN1DEREncodedCertificate | read-only | current |
| docsSecCmtsCertRootCaCert OBJECT-TYPE This attribute represents the X509 DER-encoded DOCSIS 3.1/DOCSIS 4.0 Root CA certificate that signed the Device CA certificates (2nd GEN DOCSIS (R) PKI or new PKI). | 1.3.6.1.4.1.4491.2.1.11.1.16.2 | DocsX509ASN1DEREncodedCertificate | read-only | current |
| docsSecCmtsCertDeviceCaCert OBJECT-TYPE This attribute represents the X509 DER-encoded Device CA Certificate. This is an Intermediate Certificate issued by the Root CA that signs the DOCSIS 4.0 Device Certificate that goes on a CMTS. | 1.3.6.1.4.1.4491.2.1.11.1.16.3 | DocsX509ASN1DEREncodedCertificate | read-only | current |
| docsSecCmtsCertCmtsCert OBJECT-TYPE This attribute represents the X509 DER-encoded DOCSIS 4.0 CMTS Device Certificate. | 1.3.6.1.4.1.4491.2.1.11.1.16.4 | DocsX509ASN1DEREncodedCertificate | read-only | current |
| docsSecCmtsBpiVersionCfg OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.1.17 | |||
| docsSecCmtsBpiVersionCfgBpiVersion OBJECT-TYPE This attribute configures the BPI+ version that is enabled on the CMTS. If the 'v1' bit (bit 0) is set to '1', the CMTS enables BPI+V1. If the 'v2' bit (bit 1) is set to '1', the CMTS enables BPI+V2. If both bits are set to '0', the CMTS disables BPI+. If both bits are set to '1', the CMTS enables both BPI+V1 and BPI+V2. The CMTS MUST use a default value of 0x02 for BPI+ version (i.e., enable BPI+V2 for CMs). | 1.3.6.1.4.1.4491.2.1.11.1.17.1 | CmtsBpiVer | read-write | current |
| docsSecMibConformance OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.2 | |||
| docsSecMibCompliances OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.2.1 | |||
| docsSecMibGroups OBJECT-IDENTITY | 1.3.6.1.4.1.4491.2.1.11.2.2 |
Conformance
| Name | OID | Status |
|---|---|---|
| docsSecCompliance MODULE-COMPLIANCE The compliance statement for CMTSs that implement the DOCSIS Security MIB. | 1.3.6.1.4.1.4491.2.1.11.2.1.1 | current |
| docsSecCmCompliance MODULE-COMPLIANCE The compliance statement for CMs that implement the DOCSIS Security MIB. | 1.3.6.1.4.1.4491.2.1.11.2.1.2 | deprecated |
| docsSecCmSshCompliance MODULE-COMPLIANCE The compliance statement for CMs that implement SSH Key Management in the DOCSIS Security MIB. | 1.3.6.1.4.1.4491.2.1.11.2.1.3 | current |
| docsSecBpiPlusCompliance MODULE-COMPLIANCE The compliance statement for BPI Plus in the DOCSIS Security MIB. | 1.3.6.1.4.1.4491.2.1.11.2.1.4 | current |
| docsSecCertificateManagementCompliance MODULE-COMPLIANCE The compliance statement for CM Certificate Management in the DOCSIS Security MIB. | 1.3.6.1.4.1.4491.2.1.11.2.1.5 | current |
| docsSecCmtsCertificateManagementCompliance MODULE-COMPLIANCE The compliance statement for Cmts Certificate Management in the DOCSIS Security MIB. | 1.3.6.1.4.1.4491.2.1.11.2.1.6 | current |
| docsSecGroup OBJECT-GROUP Group of objects implemented in the CMTS. | 1.3.6.1.4.1.4491.2.1.11.2.2.1 | current |
| docsSecCmGroup OBJECT-GROUP Group of objects deprecated in the CM. | 1.3.6.1.4.1.4491.2.1.11.2.2.2 | deprecated |
| docsSecCmSshGroup OBJECT-GROUP Group of objects implemented in the CM for Ssh Key Management. | 1.3.6.1.4.1.4491.2.1.11.2.2.3 | current |
| docsSecBpiPlusGroup OBJECT-GROUP Group of objects associated with BPI+ Management. | 1.3.6.1.4.1.4491.2.1.11.2.2.4 | current |
| docsSecCertificateManagementGroup OBJECT-GROUP Group of objects associated with Certificate Management. | 1.3.6.1.4.1.4491.2.1.11.2.2.5 | current |
| docsSecCmtsCertificateManagementGroup OBJECT-GROUP Group of objects associated with Cmts Certificate Management. | 1.3.6.1.4.1.4491.2.1.11.2.2.6 | current |