文档中心
SecurityPolicy
更新时间： 2026/07/01
在Gitcode上查看源码

ResourceDefinition ​

uris ​

  • /redfish/v1/Managers/manager_id/SecurityPolicy

properties ​

名称类型是否只读取值范围/枚举值说明
@odata.contextstringtrue安全服务集合资源模型的OData描述信息
@odata.idstringtrue安全服务集合资源节点的访问路径
@odata.typestringtrue安全服务集合资源类型
Idstringtrue安全服务集合资源的ID
Namestringtrue安全服务集合资源的名称
VerifyCertificateobjecttrue是否验证远程TLS端点的证书
TrustedCertificatesobjecttrue信任的证书集合
Versionsarrayfalse允许的TLS版本
Algorithmsobjectfalse允许的TLS算法
CipherSuitesarrayfalse允许的TLS加密套件
SignatureAlgorithmsarrayfalse允许的TLS签名算法

supported_methods ​

  • GET
  • PATCH

HTTP methods ​

GET ​

命令功能

查询安全策略集合资源信息

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/SecurityPolicy

请求头:

X-Auth-Token: auth_value

请求消息体: 无

参数说明

参数参数说明取值
device_ip登录设备的IP地址IPv4或IPv6地址
auth_value请求消息的鉴权参数可通过/redfish/v1/SessionService/Sessions创建会话时获得

使用指南

无

使用实例

请求样例： GET https://device_ip/redfish/v1/Managers/manager_id/SecurityPolicy

X-Auth-Token: auth_value 请求消息体：无

响应样例：

json
{
"@odata.context": "/redfish/v1/$metadata#SecurityPolicy.SecurityPolicy",
"@odata.id": "/redfish/v1/Managers/1/SecurityPolicy",
"@odata.type": "#SecurityPolicy.v1_0_2.SecurityPolicy",
"Id": "SecurityPolicy",
"Name": "Security Policy",
"TLS": {
"Server": {
"VerifyCertificate": false,
"TrustedCertificates": {
"@odata.id": "/redfish/v1/Managers/1/Certificate"
},
"Allowed": {
"Versions": [
"1.3"
],
"Algorithms": {
"CipherSuites": [
"ECDHE_RSA_CHACHA20_POLY1305",
"ECDHE_ECDSA_AES128_CCM",
"ECDHE_ECDSA_AES256_CCM",
"ECDHE_ECDSA_CHACHA20_POLY1305",
"TLS_CHACHA20_POLY1305_SHA256",
"TLS_AES_256_GCM_SHA384",
"TLS_AES_128_GCM_SHA256",
"ECDHE_RSA_AES256_GCM_SHA384",
"ECDHE_ECDSA_AES256_GCM_SHA384",
"ECDHE_RSA_AES128_GCM_SHA256",
"ECDHE_ECDSA_AES128_GCM_SHA256"
],
"SignatureAlgorithms": [
"ECC"
]
}
},
"Denied": {
"Versions": [
"1.0",
"1.1",
"1.2"
],
"Algorithms": {
"CipherSuites": [
"DHE_RSA_AES128_CCM",
"DHE_RSA_AES256_CCM",
"DHE_RSA_CHACHA20_POLY1305",
"DHE_RSA_AES256_GCM_SHA384",
"DHE_RSA_AES128_GCM_SHA256"
],
"SignatureAlgorithms": [
"RSA"
]
}
}
}
}
}

响应码：200

PATCH ​

命令功能

修改安全策略集合资源信息

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/SecurityPolicy

请求头:

X-Auth-Token: auth_value
Content-Type: header_type
If-Match: ifmatch_value

请求消息体:

json
{
  "TLS": {
    "Server": {
      "Allowed": {
        "Versions": [
          "versions"
        ],
        "Algorithms": {
          "CipherSuites": [
            "cipherSuites"
          ],
          "SignatureAlgorithms": [
            "signatureAlgorithms"
          ]
        }
      },
      "Denied": {
        "Versions": [
          "versions"
        ],
        "Algorithms": {
          "CipherSuites": [
            "cipherSuites"
          ],
          "SignatureAlgorithms": [
            "signatureAlgorithms"
          ]
        }
      }
    }
  }
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

参数参数说明取值
ifmatch_value请求消息的匹配参数可通过对相应资源发起GET操作，从响应头中获取（对应于“ETag”参数）
versionsTLS版本如果是“ALL”或者是空数组表示所有的版本，如果是“NONE”表示支持或不支持所有的版本，不允许设置结果为支持的版本为空
● 1.2
● 1.3
● ALL
● NONE
cipherSuitesTLS加密套件如果是“ALL”或者是空数组表示所有的套件，如果是“NONE”表示支持或不支持所有的套件，不允许设置结果为支持的加密套件为空
● ECDHE_RSA_CHACHA20_POLY1305
● ECDHE_ECDSA_AES128_CCM
● ECDHE_ECDSA_AES256_CCM
● ECDHE_ECDSA_CHACHA20_POLY1305
● TLS_CHACHA20_POLY1305_SHA256
● TLS_AES_256_GCM_SHA384
● TLS_AES_128_GCM_SHA256
● ECDHE_RSA_AES256_GCM_SHA384
● ECDHE_ECDSA_AES256_GCM_SHA384
● ECDHE_RSA_AES128_GCM_SHA256
● ECDHE_ECDSA_AES128_GCM_SHA256
● DHE_RSA_AES128_CCM
● DHE_RSA_AES256_CCM
● DHE_RSA_CHACHA20_POLY1305
● DHE_RSA_AES256_GCM_SHA384
● DHE_RSA_AES128_GCM_SHA256
● ALL
● NONE
signatureAlgorithmsTLS签名算法如果是“ALL”或者是空数组表示所有的签名算法，如果是“NONE”表示支持或不支持所有的签名算法，不允许设置结果为支持的签名算法为空
● ECC
● RSA
● ALL
● NONE

使用指南

涉及TLS双向校验的功能为Syslog、CMPv2，修改server侧TLS配置会影响web、 redfish、SMTP、Syslog、LDAP、CMPv2、文件下载、事件上报等涉及TLS握手的功能

使用实例

请求样例： PATCH https://device_ip/redfish/v1/Managers/manager_id/SecurityPolicy

X-Auth-Token: auth_value Content-Type: header_type If-Match: ifmatch_value 请求消息体：

json
{
  "TLS": {
    "Server": {
      "Allowed": {
        "Versions": [
          "versions"
        ],
        "Algorithms": {
          "CipherSuites": [
            "cipherSuites"
          ],
          "SignatureAlgorithms": [
            "signatureAlgorithms"
          ]
        }
      },
      "Denied": {
        "Versions": [
          "versions"
        ],
        "Algorithms": {
          "CipherSuites": [
            "cipherSuites"
          ],
          "SignatureAlgorithms": [
            "signatureAlgorithms"
          ]
        }
      }
    }
  }
}

响应样例：

json
{
  "@odata.context": "/redfish/v1/$metadata#SecurityPolicy.SecurityPolicy",
  "@odata.id": "/redfish/v1/Managers/1/SecurityPolicy",
  "@odata.type": "#SecurityPolicy.v1_0_2.SecurityPolicy",
  "Id": "SecurityPolicy",
  "Name": "Security Policy",
  "TLS": {
    "Server": {
      "VerifyCertificate": false,
      "TrustedCertificates": {
        "@odata.id": "/redfish/v1/Managers/1/Certificate"
      },
      "Allowed": {
        "Versions": [
          "1.3"
        ],
        "Algorithms": {
          "CipherSuites": [
            "ECDHE_RSA_CHACHA20_POLY1305",
            "ECDHE_ECDSA_AES128_CCM",
            "ECDHE_ECDSA_AES256_CCM",
            "ECDHE_ECDSA_CHACHA20_POLY1305",
            "TLS_CHACHA20_POLY1305_SHA256",
            "TLS_AES_256_GCM_SHA384",
            "TLS_AES_128_GCM_SHA256",
            "ECDHE_RSA_AES256_GCM_SHA384",
            "ECDHE_ECDSA_AES256_GCM_SHA384",
            "ECDHE_RSA_AES128_GCM_SHA256",
            "ECDHE_ECDSA_AES128_GCM_SHA256"
          ],
          "SignatureAlgorithms": [
            "ECC"
          ]
        }
      },
      "Denied": {
        "Versions": [
          "1.0",
          "1.1",
          "1.2"
        ],
        "Algorithms": {
          "CipherSuites": [
            "DHE_RSA_AES128_CCM",
            "DHE_RSA_AES256_CCM",
            "DHE_RSA_CHACHA20_POLY1305",
            "DHE_RSA_AES256_GCM_SHA384",
            "DHE_RSA_AES128_GCM_SHA256"
          ],
          "SignatureAlgorithms": [
            "RSA"
          ]
        }
      }
    }
  }
}

响应码：200