文档中心
SecurityService
更新时间： 2026/07/01
在Gitcode上查看源码

ResourceDefinition ​

uris ​

  • /redfish/v1/Managers/manager_id/SecurityService

properties ​

名称类型是否只读取值范围/枚举值说明
@odata.contextstringtrue安全服务资源的OData描述信息
@odata.typestringtrue安全服务资源类型
@odata.idstringtrue安全服务资源的访问路径
Idstringtrue安全服务资源的ID
Namestringtrue安全服务资源的名称
SessionTokenLengthnumbertrue会话Token长度
SecurityControlVersionnumbertrue安全控制版本号
IntrusionDetectionReportEnabledbooleantrue入侵检测报告使能状态
MasterKeyUpdateIntervalnumberfalse主密钥更新间隔
HttpsTransferCertVerificationbooleanfalseHTTPS传输证书校验使能状态
SOLAutoOSLockEnabledbooleanfalseSOL自动OS锁定使能状态说明该接口为预留接口,功能暂未实现
SOLAutoOSLockKeynumberfalseSOL自动OS锁定密钥说明该接口为预留接口,功能暂未实现
RemoteHttpsServerCertChainInfoarraytrue远程HTTPS服务器证书链信息
Links.HttpsCertobjecttrueHTTPS证书资源链接
Links.DiceCertobjecttrueDICE证书资源链接
Links.CertUpdateServiceobjecttrue证书更新服务资源链接
SSHCiphersobjectfalseSSH加密算法配置
SSHKexAlgorithmsobjectfalseSSH密钥交换算法配置
SSHMACsobjectfalseSSH MAC算法配置
SSHHostKeyAlgorithmsobjectfalseSSH主机密钥算法配置
SSLCipherSuitesobjectfalseSSL加密套件配置
RMCPCipherSuitesobjectfalseRMCP加密套件配置
IPMIChannelAccessobjectfalseIPMI通道访问配置
ComponentMeasurementPolicystringfalse组件度量策略
targetstringtrue操作路径
@Redfish.ActionInfostringtrue操作查询路径
codestringtrue指示消息注册表中特定消息ID的字符串
messagestringtrue与消息注册表中的消息对应的易读的错误消息
MessageIdstringtrue消息ID
RelatedPropertiesarraytrue消息相关属性
Messagestringtrue详细信息
MessageArgsarraytrue信息参数
Severitystringtrue严重性Redfish支持的严重级别包括：OK、Warning、Critical
Resolutionstringtrue解决建议

supported_methods ​

  • GET
  • PATCH
  • POST

HTTP methods ​

GET ​

命令功能

查询服务器当前支持的安全服务集合的信息

说明

该接口为预留接口,功能暂未实现。

json
{
  "SOLAutoOSLockKey": 0,
  "RemoteHttpsServerCertChainInfo": [
    {
      "CertId": 1,
      "Usage": "EventSubscription",
      "ServerCert": {
        "IssueBy": "CN=FDCa11, OU=IT, O=xxx, L=SHENZHEN, S=GUANGDONG, C=CN",
        "IssueTo": "CN=FDCa12, OU=IT, O=xxx, L=SHENZHEN, S=GUANGDONG, C=CN",
        "ValidFrom": "Nov 10 2020 UTC",
        "ValidTo": "Nov 10 2030 UTC",
        "SerialNumber": "01 23 45 aa c7",
        "SignatureAlgorithm": "sha256WithRSAEncryption",
        "KeyUsage": "Certificate Sign, CRL Sign",
        "PublicKeyLengthBits": 2048,
        "FingerPrint": "4859f4e270261522c479762ef7359ea871711a78d2ad3b45dda330bbe571a2ea",
        "IsImportCrl": true,
        "CrlValidFrom": "Nov 11 2020 UTC",
        "CrlValidTo": "Dec 11 2020 UTC"
      }
    }
  ],
  "Links": {
    "HttpsCert": {
      "@odata.id": "/redfish/v1/Managers/1/SecurityService/HttpsCert"
    },
    "DiceCert": {
      "@odata.id": "/redfish/v1/Managers/1/SecurityService/DiceCert"
    },
    "CertUpdateService": {
      "@odata.id": "/redfish/v1/Managers/1/SecurityService/CertUpdateService"
    }
  },
  "SSHCiphers": {
    "aes128-ctrEnabled": true,
    "aes192-ctrEnabled": true,
    "aes256-ctrEnabled": true,
    "aes128-gcm@openssh.comEnabled": true,
    "aes256-gcm@openssh.comEnabled": true,
    "chacha20-poly1305@openssh.comEnabled": true
  },
  "SSHKexAlgorithms": {
    "curve25519-sha256Enabled": true,
    "curve25519-sha256@libssh.orgEnabled": true,
    "diffie-hellman-group-exchange-sha256Enabled": true,
    "diffie-hellman-group14-sha1Enabled": true,
    "diffie-hellman-group16-sha512Enabled": false,
    "diffie-hellman-group18-sha512Enabled": false,
    "diffie-hellman-group-exchange-sha1Enabled": true
  },
  "SSHMACs": {
    "hmac-sha2-512Enabled": true,
    "hmac-sha2-512-etm@openssh.comEnabled": true,
    "hmac-sha2-256Enabled": true,
    "hmac-sha2-256-etm@openssh.comEnabled": true
  },
  "SSHHostKeyAlgorithms": {
    "ssh-ed25519Enabled": true,
    "ssh-ed25519-cert-v01@openssh.comEnabled": true,
    "ecdsa-sha2-nistp256Enabled": true,
    "ecdsa-sha2-nistp384Enabled": true,
    "ecdsa-sha2-nistp521Enabled": true,
    "rsa-sha2-256Enabled": true,
    "rsa-sha2-512Enabled": true,
    "ssh-rsaEnabled": true,
    "ssh-rsa-cert-v01@openssh.comEnabled": true
  },
  "SSLCipherSuites": {
    "ECDHE-RSA-AES256-GCM-SHA384Enabled": true,
    "ECDHE-ECDSA-AES256-GCM-SHA384Enabled": true,
    "DHE-RSA-AES256-GCM-SHA384Enabled": false,
    "ECDHE-RSA-AES128-GCM-SHA256Enabled": true,
    "ECDHE-ECDSA-AES128-GCM-SHA256Enabled": true,
    "DHE-RSA-AES128-GCM-SHA256Enabled": false,
    "ECDHE-RSA-CHACHA20-POLY1305Enabled": false,
    "DHE-RSA-AES128-CCMEnabled": false,
    "DHE-RSA-AES256-CCMEnabled": false,
    "DHE-RSA-CHACHA20-POLY1305Enabled": false,
    "ECDHE-ECDSA-AES128-CCMEnabled": true,
    "ECDHE-ECDSA-AES256-CCMEnabled": true,
    "ECDHE-ECDSA-CHACHA20-POLY1305Enabled": true,
    "TLS_CHACHA20_POLY1305_SHA256Enabled": true,
    "TLS_AES_256_GCM_SHA384Enabled": true,
    "TLS_AES_128_GCM_SHA256Enabled": true
  },
  "RMCPCipherSuites": {
    "CipherSuite1": {
      "Enabled": true,
      "AuthenticationAlgorithm": "RAKP-HMAC-SHA1",
      "IntegrityAlgorithm": "None",
      "ConfidentialityAlgorithm": "None"
    },
    "CipherSuite2": {
      "Enabled": true,
      "AuthenticationAlgorithm": "RAKP-HMAC-SHA1",
      "IntegrityAlgorithm": "HMAC-SHA1-96",
      "ConfidentialityAlgorithm": "None"
    },
    "CipherSuite3": {
      "Enabled": true,
      "AuthenticationAlgorithm": "RAKP-HMAC-SHA1",
      "IntegrityAlgorithm": "HMAC-SHA1-96",
      "ConfidentialityAlgorithm": "AES-CBC-128"
    },
    "CipherSuite17": {
      "Enabled": true,
      "AuthenticationAlgorithm": "RAKP-HMAC-SHA256",
      "IntegrityAlgorithm": "HMAC-SHA256-128",
      "ConfidentialityAlgorithm": "AES-CBC-128"
    }
  },
  "Actions": {
    "#SecurityService.UpdateMasterKey": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.UpdateMasterKey",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/UpdateMasterKeyActionInfo"
    },
    "#SecurityService.ImportRemoteHttpsServerRootCA": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.ImportRemoteHttpsServerRootCA",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/ImportRemoteHttpsServerRootCAActionInfo"
    },
    "#SecurityService.DeleteRemoteHttpsServerRootCA": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.DeleteRemoteHttpsServerRootCA",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/DeleteRemoteHttpsServerRootCAActionInfo"
    },
    "#SecurityService.ImportRemoteHttpsServerCrl": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.ImportRemoteHttpsServerCrl",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/ImportRemoteHttpsServerCrlActionInfo"
    },
    "#SecurityService.DeleteRemoteHttpsServerCrl": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.DeleteRemoteHttpsServerCrl",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/DeleteRemoteHttpsServerCrlActionInfo"
    }
  },
  "IPMIChannelAccess": {
    "SMSAccessRole": "Administrator",
    "IPMBAccessRole": "Administrator"
  },
  "ComponentMeasurementPolicy": "LoggingAndAlarm"
}

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/SecurityService

请求头:


X-Auth-Token: auth_value

请求消息体: 无

参数说明

参数参数说明取值
device_ip登录设备的IP地址IPv4或IPv6地址
auth_value请求消息的鉴权参数可通过/redfish/v1/SessionService/Sessions创建会话时获得

使用指南

无

使用实例

请求样例： GET https://device_ip/redfish/v1/Managers/manager_id/SecurityService

X-Auth-Token: auth_value 请求消息体：无

响应样例：

json
{
  "@odata.context": "/redfish/v1/$metadata#SecurityService.SecurityService",
  "@odata.id": "/redfish/v1/Managers/1/SecurityService",
  "@odata.type": "#SecurityService.v1_0_0.SecurityService",
  "Id": "SecurityService",
  "Name": "Security Service",
  "SessionTokenLength": 16,
  "SecurityControlVersion": 1,
  "IntrusionDetectionReportEnabled": true,
  "MasterKeyUpdateInterval": 0,
  "HttpsTransferCertVerification": false,
  "SOLAutoOSLockEnabled": false,
  "SOLAutoOSLockKey": 0,
  "SSHCiphers": {
    "aes128-ctrEnabled": true,
    "aes192-ctrEnabled": true,
    "aes256-ctrEnabled": true,
    "aes128-gcm@openssh.comEnabled": true,
    "aes256-gcm@openssh.comEnabled": true,
    "chacha20-poly1305@openssh.comEnabled": true
  },
  "SSHKexAlgorithms": {
    "curve25519-sha256Enabled": true,
    "curve25519-sha256@libssh.orgEnabled": true,
    "diffie-hellman-group-exchange-sha256Enabled": true,
    "diffie-hellman-group14-sha1Enabled": true,
    "diffie-hellman-group16-sha512Enabled": true,
    "diffie-hellman-group18-sha512Enabled": true,
    "diffie-hellman-group-exchange-sha1Enabled": true
  },
  "SSHMACs": {
    "hmac-sha2-512Enabled": true,
    "hmac-sha2-512-etm@openssh.comEnabled": true,
    "hmac-sha2-256Enabled": true,
    "hmac-sha2-256-etm@openssh.comEnabled": true
  },
  "SSHHostKeyAlgorithms": {
    "ssh-ed25519Enabled": true,
    "ssh-ed25519-cert-v01@openssh.comEnabled": true,
    "ecdsa-sha2-nistp256Enabled": true,
    "ecdsa-sha2-nistp384Enabled": true,
    "ecdsa-sha2-nistp521Enabled": true,
    "rsa-sha2-256Enabled": true,
    "rsa-sha2-512Enabled": true,
    "ssh-rsaEnabled": true,
    "ssh-rsa-cert-v01@openssh.comEnabled": true
  },
  "SSLCipherSuites": {
    "ECDHE-RSA-AES256-GCM-SHA384Enabled": true,
    "ECDHE-ECDSA-AES256-GCM-SHA384Enabled": true,
    "DHE-RSA-AES256-GCM-SHA384Enabled": true,
    "ECDHE-RSA-AES128-GCM-SHA256Enabled": true,
    "ECDHE-ECDSA-AES128-GCM-SHA256Enabled": true,
    "DHE-RSA-AES128-GCM-SHA256Enabled": true
  },
  "RMCPCipherSuites": {
    "CipherSuite1": {
      "Enabled": true
    },
    "CipherSuite2": {
      "Enabled": true
    },
    "CipherSuite3": {
      "Enabled": true
    },
    "CipherSuite17": {
      "Enabled": true
    }
  },
  "IPMIChannelAccess": {
    "SMSAccessRole": "Administrator",
    "IPMBAccessRole": "Administrator"
  },
  "ComponentMeasurementPolicy": "LoggingAndAlarm"
}

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/SecurityService

请求头:

X-Auth-Token: auth_value
Content-Type: header_type
If-Match: ifmatch_value

请求消息体:

json
{
  "SessionTokenLength": tokenlen_value,
  "MasterKeyUpdateInterval": interval,
  "HttpsTransferCertVerification": verification_value,
  "SOLAutoOSLockEnabled": state,
  "SOLAutoOSLockKey": key_value,
  "SSHCiphers": {
    "aes128-ctrEnabled": state,
    "aes192-ctrEnabled": state,
    "aes256-ctrEnabled": state,
    "aes128-gcm@openssh.comEnabled": state,
    "aes256-gcm@openssh.comEnabled": state,
    "chacha20-poly1305@openssh.comEnabled": state
  },
  "SSHKexAlgorithms": {
    "curve25519-sha256Enabled": state,
    "curve25519-sha256@libssh.orgEnabled": state,
    "diffie-hellman-group-exchange-sha256Enabled": state,
    "diffie-hellman-group14-sha1Enabled": state,
    "diffie-hellman-group16-sha512Enabled": state,
    "diffie-hellman-group18-sha512Enabled": state,
    "diffie-hellman-group-exchange-sha1Enabled": state
  },
  "SSHMACs": {
    "hmac-sha2-512Enabled": state,
    "hmac-sha2-512-etm@openssh.comEnabled": state,
    "hmac-sha2-256Enabled": state,
    "hmac-sha2-256-etm@openssh.comEnabled": state
  },
  "SSHHostKeyAlgorithms": {
    "ssh-ed25519Enabled": state,
    "ssh-ed25519-cert-v01@openssh.comEnabled": state,
    "ecdsa-sha2-nistp256Enabled": state,
    "ecdsa-sha2-nistp384Enabled": state,
    "ecdsa-sha2-nistp521Enabled": state,
    "rsa-sha2-256Enabled": state,
    "rsa-sha2-512Enabled": state,
    "ssh-rsaEnabled": state,
    "ssh-rsa-cert-v01@openssh.comEnabled": state
  },
  "SSLCipherSuites": {
    "ECDHE-RSA-AES256-GCM-SHA384Enabled": state,
    "ECDHE-ECDSA-AES256-GCM-SHA384Enabled": state,
    "DHE-RSA-AES256-GCM-SHA384Enabled": state,
    "ECDHE-RSA-AES128-GCM-SHA256Enabled": state,
    "ECDHE-ECDSA-AES128-GCM-SHA256Enabled": state,
    "DHE-RSA-AES128-GCM-SHA256Enabled": state
  },
  "RMCPCipherSuites": {
    "CipherSuite1": {
      "Enabled": state
    },
    "CipherSuite2": {
      "Enabled": state
    },
    "CipherSuite3": {
      "Enabled": state
    },
    "CipherSuite17": {
      "Enabled": state
    }
  },
  "IPMIChannelAccess": {
    "SMSAccessRole": "Administrator",
    "IPMBAccessRole": "Administrator"
  },
  "ComponentMeasurementPolicy": "LoggingAndAlarm"
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

参数参数说明取值
ifmatch_value请求消息的匹配参数可通过对相应资源发起GET操作,从响应头中获取（对应于“ETag”参数）
tokenlen_valueRedfish消息Token长度● 16：token长度16字节 (32个16进制字符)
● 32：token长度为32字节（64个16进制字符）
interval主密钥更新间隔● 0 ~365的整数,单位为天
● 0表示不自动更新主密钥
verification_value远程Https服务器证书校验开关● true
● false
key_valueSOL的OS自动锁屏按键● 0：组合键ctrl + d
● 1：字符串exit
stateSOL的OS自动锁屏使能状态、算法或加密套件的使能状态● true
● false

使用指南

  1. 可同时设置多种算法或加密套件的使能状态。
  2. 若SSL加密套件的使能状态发生变更,需要重启BMC使变更生效。

使用实例

请求样例： PATCH https://device_ip/redfish/v1/Managers/manager_id/SecurityService

X-Auth-Token: auth_value Content-Type: header_type If-Match: ifmatch_value 请求消息体：

json
{
  "SessionTokenLength": tokenlen_value,
  "MasterKeyUpdateInterval": interval,
  "HttpsTransferCertVerification": verification_value,
  "SOLAutoOSLockEnabled": state,
  "SOLAutoOSLockKey": key_value,
  "SSHCiphers": {
    "aes128-ctrEnabled": state,
    "aes192-ctrEnabled": state,
    "aes256-ctrEnabled": state,
    "aes128-gcm@openssh.comEnabled": state,
    "aes256-gcm@openssh.comEnabled": state,
    "chacha20-poly1305@openssh.comEnabled": state
  },
  "SSHKexAlgorithms": {
    "curve25519-sha256Enabled": state,
    "curve25519-sha256@libssh.orgEnabled": state,
    "diffie-hellman-group-exchange-sha256Enabled": state,
    "diffie-hellman-group14-sha1Enabled": state,
    "diffie-hellman-group16-sha512Enabled": state,
    "diffie-hellman-group18-sha512Enabled": state,
    "diffie-hellman-group-exchange-sha1Enabled": state
  },
  "SSHMACs": {
    "hmac-sha2-512Enabled": state,
    "hmac-sha2-512-etm@openssh.comEnabled": state,
    "hmac-sha2-256Enabled": state,
    "hmac-sha2-256-etm@openssh.comEnabled": state
  },
  "SSHHostKeyAlgorithms": {
    "ssh-ed25519Enabled": state,
    "ssh-ed25519-cert-v01@openssh.comEnabled": state,
    "ecdsa-sha2-nistp256Enabled": state,
    "ecdsa-sha2-nistp384Enabled": state,
    "ecdsa-sha2-nistp521Enabled": state,
    "rsa-sha2-256Enabled": state,
    "rsa-sha2-512Enabled": state,
    "ssh-rsaEnabled": state,
    "ssh-rsa-cert-v01@openssh.comEnabled": state
  },
  "SSLCipherSuites": {
    "ECDHE-RSA-AES256-GCM-SHA384Enabled": state,
    "ECDHE-ECDSA-AES256-GCM-SHA384Enabled": state,
    "DHE-RSA-AES256-GCM-SHA384Enabled": state,
    "ECDHE-RSA-AES128-GCM-SHA256Enabled": state,
    "ECDHE-ECDSA-AES128-GCM-SHA256Enabled": state,
    "DHE-RSA-AES128-GCM-SHA256Enabled": state
  },
  "RMCPCipherSuites": {
    "CipherSuite1": {
      "Enabled": state
    },
    "CipherSuite2": {
      "Enabled": state
    },
    "CipherSuite3": {
      "Enabled": state
    },
    "CipherSuite17": {
      "Enabled": state
    }
  },
  "IPMIChannelAccess": {
    "SMSAccessRole": "Administrator",
    "IPMBAccessRole": "Administrator"
  },
  "ComponentMeasurementPolicy": "LoggingAndAlarm"
}

响应样例：

json
{
  "@odata.context": "/redfish/v1/$metadata#Managers/Members/1/SecurityService/$entity",
  "@odata.id": "/redfish/v1/Managers/1/SecurityService",
  "@odata.type": "#SecurityService.v1_0_0.SecurityService",
  "Id": "SecurityService",
  "Name": "Security Service",
  "SessionTokenLength": 16,
  "SecurityControlVersion": 1,
  "MasterKeyUpdateInterval": 0,
  "HttpsTransferCertVerification": true,
  "SOLAutoOSLockEnabled": false,
  "SOLAutoOSLockKey": 0,
  "RemoteHttpsServerCertChainInfo": [
    {
      "CertId": 1,
      "Usage": "Manager CA Certificate",
      "ServerCert": {
        "IssueBy": "CN=FDCa11, OU=IT, O=xxx, L=SHENZHEN, S=GUANGDONG, C=CN",
        "IssueTo": "CN=FDCa12, OU=IT, O=xxx, L=SHENZHEN, S=GUANGDONG, C=CN",
        "ValidFrom": "Nov 10 2020 UTC",
        "ValidTo": "Nov 10 2030 UTC",
        "SerialNumber": "01 23 45 aa c7",
        "SignatureAlgorithm": "sha256WithRSAEncryption",
        "KeyUsage": "Certificate Sign, CRL Sign",
        "PublicKeyLengthBits": 2048,
        "FingerPrint": "4859f4e270261522c479762ef7359ea871711a78d2ad3b45dda330bbe571a2ea",
        "IsImportCrl": true,
        "CrlValidFrom": "Nov 11 2020 UTC",
        "CrlValidTo": "Dec 11 2020 UTC"
      }
    }
  ],
  "Links": {
    "HttpsCert": {
      "@odata.id": "/redfish/v1/Managers/1/SecurityService/HttpsCert"
    },
    "DiceCert": {
      "@odata.id": "/redfish/v1/Managers/1/SecurityService/DiceCert"
    },
    "CertUpdateService": {
      "@odata.id": "/redfish/v1/Managers/1/SecurityService/CertUpdateService"
    }
  },
  "SSHCiphers": {
    "aes128-ctrEnabled": true,
    "aes192-ctrEnabled": true,
    "aes256-ctrEnabled": true,
    "aes128-gcm@openssh.comEnabled": true,
    "aes256-gcm@openssh.comEnabled": true,
    "chacha20-poly1305@openssh.comEnabled": true
  },
  "SSHKexAlgorithms": {
    "curve25519-sha256Enabled": true,
    "curve25519-sha256@libssh.orgEnabled": true,
    "diffie-hellman-group-exchange-sha256Enabled": true,
    "diffie-hellman-group14-sha1Enabled": true,
    "diffie-hellman-group16-sha512Enabled": false,
    "diffie-hellman-group18-sha512Enabled": false,
    "diffie-hellman-group-exchange-sha1Enabled": true
  },
  "SSHMACs": {
    "hmac-sha2-512Enabled": true,
    "hmac-sha2-512-etm@openssh.comEnabled": true,
    "hmac-sha2-256Enabled": true,
    "hmac-sha2-256-etm@openssh.comEnabled": true
  },
  "SSHHostKeyAlgorithms": {
    "ssh-ed25519Enabled": true,
    "ssh-ed25519-cert-v01@openssh.comEnabled": true,
    "ecdsa-sha2-nistp256Enabled": true,
    "ecdsa-sha2-nistp384Enabled": true,
    "ecdsa-sha2-nistp521Enabled": true,
    "rsa-sha2-256Enabled": true,
    "rsa-sha2-512Enabled": true,
    "ssh-rsaEnabled": true,
    "ssh-rsa-cert-v01@openssh.comEnabled": true
  },
  "SSLCipherSuites": {
    "ECDHE-RSA-AES256-GCM-SHA384Enabled": true,
    "ECDHE-ECDSA-AES256-GCM-SHA384Enabled": true,
    "DHE-RSA-AES256-GCM-SHA384Enabled": true,
    "ECDHE-RSA-AES128-GCM-SHA256Enabled": true,
    "ECDHE-ECDSA-AES128-GCM-SHA256Enabled": true,
    "DHE-RSA-AES128-GCM-SHA256Enabled": true
  },
  "RMCPCipherSuites": {
    "CipherSuite1": {
      "Enabled": true,
      "AuthenticationAlgorithm": "RAKP-HMAC-SHA1",
      "IntegrityAlgorithm": "None",
      "ConfidentialityAlgorithm": "None"
    },
    "CipherSuite2": {
      "Enabled": true,
      "AuthenticationAlgorithm": "RAKP-HMAC-SHA1",
      "IntegrityAlgorithm": "HMAC-SHA1-96",
      "ConfidentialityAlgorithm": "None"
    },
    "CipherSuite3": {
      "Enabled": true,
      "AuthenticationAlgorithm": "RAKP-HMAC-SHA1",
      "IntegrityAlgorithm": "HMAC-SHA1-96",
      "ConfidentialityAlgorithm": "AES-CBC-128"
    },
    "CipherSuite17": {
      "Enabled": true,
      "AuthenticationAlgorithm": "RAKP-HMAC-SHA256",
      "IntegrityAlgorithm": "HMAC-SHA256-128",
      "ConfidentialityAlgorithm": "AES-CBC-128"
    }
  },
  "Actions": {
    "#SecurityService.UpdateMasterKey": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.UpdateMasterKey",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/UpdateMasterKeyActionInfo"
    },
    "#SecurityService.ImportRemoteHttpsServerRootCA": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.ImportRemoteHttpsServerRootCA",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/ImportRemoteHttpsServerRootCAActionInfo"
    },
    "#SecurityService.DeleteRemoteHttpsServerRootCA": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.DeleteRemoteHttpsServerRootCA",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/DeleteRemoteHttpsServerRootCAActionInfo"
    },
    "#SecurityService.ImportRemoteHttpsServerCrl": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.ImportRemoteHttpsServerCrl",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/ImportRemoteHttpsServerCrlActionInfo"
    },
    "#SecurityService.DeleteRemoteHttpsServerCrl": {
      "target": "/redfish/v1/Managers/1/SecurityService/Actions/SecurityService.DeleteRemoteHttpsServerCrl",
      "@Redfish.ActionInfo": "/redfish/v1/Managers/1/SecurityService/DeleteRemoteHttpsServerCrlActionInfo"
    }
  },
  "IPMIChannelAccess": {
    "SMSAccessRole": "Administrator",
    "IPMBAccessRole": "Administrator"
  },
  "ComponentMeasurementPolicy": "LoggingAndAlarm"
}

响应码：200

POST (ACTION) ​

UpdateMasterKey ​

命令功能

更新系统主密钥

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/SecurityService/Actions/SecurityService.UpdateMasterKey

请求头:

X-Auth-Token: auth_value
Content-Type: header_type

请求消息体:

json
{}

请求头参数说明

参见 请求头参数说明

请求体参数说明

无

使用指南

无

使用实例

请求样例： POST https://device_ip/redfish/v1/Managers/manager_id/SecurityService/Actions/SecurityService.UpdateMasterKey

X-Auth-Token: auth_value Content-Type: header_type 请求消息体：

json
{}

响应样例：

json
{
  "@odata.context": "/redfish/v1/$metadata#TaskService/Tasks/Members/$entity",
  "@odata.type": "#Task.v1_0_2.Task",
  "@odata.id": "/redfish/v1/TaskService/Tasks/2",
  "Id": "2",
  "Name": "Update Master Key Task",
  "Description": "",
  "TaskState": "Running",
  "TaskStatus": "OK",
  "StartTime": "2019-12-28T00:08:29+08:00",
  "Messages": [],
  "PercentComplete": null,
  "Oem": {
    "Public": {
      "TaskPercentage": null
    }
  }
}

响应码：202

POST (ACTION) ​

ImportRemoteHttpsServerRootCA ​

命令功能

导入远程 HTTPS 传输服务器根证书

说明 须知 此资源已经废弃,仅供兼容性用途使用。建议使用redfish/v1/CertificateService接口 进行CA证书/吊销列表管理 自BMC300 5.2.0.1版本后CA证书升级为资源池,所有BMC业务共用资源池中的CA证 书,此接口导入证书会影响到其他包含根证书的接口。共用CA证书业务包括： Syslog、SMTP、LDAP、SSL证书自动更新、远程HTTPS服务器、双因素登录业务

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/SecurityService/Actions/SecurityService.ImportRemoteHttpsServerRootCA

请求头:

X-Auth-Token: auth_value
Content-Type: header_type

请求消息体:

json
{
  "Type": "text",
  "Content": crt_text,
  "RootCertId": certid_value
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

参数参数说明取值
crt_text远程HTTPS传输服务器证书文本远程HTTPS传输服务器证书的文本内容
tmp_uri远程HTTPS传输服务器证书的本地路径证书的本地路径,/tmp/ 目录/文件名,文件扩展名必须是 “.crt、.cer、.pem”
remote_uri远程HTTPS传输服务器证书的远程路径远程导入的路径,形如：sftp://user:password@ip/ path；目前支持五种传输协议,https、scp、sftp、cifs、nfs,远程文件的扩展名必须是 “.crt、.cer、.pem”
certid_value远程HTTPS传输服务器认证的根证书ID数值类型值,取值在1至32之间； 每个证书均可以被Redfish事件订阅或HTTPS协议的远程文件传输使用；不指定证书ID时,会自动选择空余的证书ID进行导入
usage_value兼容历史功能的参数字符串类型。可选参数。 此参数实际不生效,仅作兼容性用途。导入时会自动忽略此参数。

使用指南

  1. 相同用途的证书不允许重复导入；
  2. 指定证书ID导入时,如果此ID之前已导入一个证书,则会用新证书覆盖旧证书；

使用实例

请求样例： POST https://device_ip/redfish/v1/Managers/manager_id/SecurityService/Actions/SecurityService.ImportRemoteHttpsServerRootCA

X-Auth-Token: auth_value Content-Type: header_type 请求消息体：

json
{
  "Type": "text",
  "Content": crt_text,
  "RootCertId": certid_value
}

响应样例：

json
{
  "error": {
    "code": "Base.1.0.GeneralError",
    "message": "A general error has occurred. See ExtendedInfo for more information.",
    "@Message.ExtendedInfo": [
      {
        "@odata.type": "#Message.v1_0_0.Message",
        "MessageId": "Base.1.0.Success",
        "RelatedProperties": [],
        "Message": "Successfully Completed Request",
        "MessageArgs": [],
        "Severity": "OK",
        "Resolution": "None"
      }
    ]
  }
}

响应码：200

POST (ACTION) ​

DeleteRemoteHttpsServerRootCA ​

命令功能

删除远程 HTTPS 传输服务器根证书

说明 须知 此资源已经废弃,仅供兼容性用途使用。建议使用redfish/v1/CertificateService接口 进行CA证书/吊销列表管理 自BMC300 5.2.0.1版本后CA证书升级为资源池,所有BMC业务共用资源池中的CA证 书,此接口导入证书会影响到其他包含根证书的接口。共用CA证书业务包括： Syslog、SMTP、LDAP、SSL证书自动更新、远程HTTPS服务器、双因素登录业务

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/SecurityService/Actions/SecurityService.DeleteRemoteHttpsServerRootCA

请求头:

X-Auth-Token: auth_value
Content-Type: header_type

请求消息体:

json
{
  "RootCertId": certid_value
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

参数参数说明取值
certid_value远程HTTPS传输服务器认证的根证书ID数值类型值,取值在1至32之间；且对应的根证书已经导入。

使用指南

无

使用实例

请求样例： POST https://device_ip/redfish/v1/Managers/manager_id/SecurityService/Actions/SecurityService.DeleteRemoteHttpsServerRootCA

X-Auth-Token: auth_value Content-Type: header_type 请求消息体：

json
{
  "RootCertId": certid_value
}

响应样例：

json
{
  "error": {
    "code": "Base.1.0.GeneralError",
    "message": "A general error has occurred. See ExtendedInfo for more information.",
    "@Message.ExtendedInfo": [
      {
        "@odata.type": "#Message.v1_0_0.Message",
        "MessageId": "Base.1.0.Success",
        "RelatedProperties": [],
        "Message": "Successfully Completed Request",
        "MessageArgs": [],
        "Severity": "OK",
        "Resolution": "None"
      }
    ]
  }
}

响应码：200

POST (ACTION) ​

ImportRemoteHttpsServerCrl ​

命令功能

导入远程 HTTPS 传输服务器根证书的吊销列表

说明 须知 此资源已经废弃,仅供兼容性用途使用。建议使用redfish/v1/CertificateService接口 进行CA证书/吊销列表管理 自BMC300 5.2.0.1版本后CA证书升级为资源池,所有BMC业务共用资源池中的CA证 书,此接口导入证书会影响到其他包含根证书的接口。共用CA证书业务包括： Syslog、SMTP、LDAP、SSL证书自动更新、远程HTTPS服务器、双因素登录业务

命令格式

URL: https://device_ip/redfish/v1/Managers/manager_id/SecurityService/Actions/SecurityService.ImportRemoteHttpsServerCrl

请求头:

X-Auth-Token: auth_value
Content-Type: header_type

请求消息体:

json
{
  "Type": "text",
  "Content": crl_text,
  "RootCertId": certid_value
}

请求头参数说明

参见 请求头参数说明

请求体参数说明

无

使用指南

无

使用实例

请求样例： POST https://device_ip/redfish/v1/Managers/manager_id/SecurityService/Actions/SecurityService.ImportRemoteHttpsServerCrl

Content-Type: header_type X-Auth-Token: auth_value 请求消息体：

json
{
  "Type": "text",
  "Content": crl_text,
  "RootCertId": certid_value
}

响应码：200