Simple Identity Management Profile

Transcription

1 Simple Identity Management Prfile Dcument Number: DCIM1055 Dcument Type: Specificatin Dcument Status: Published Dcument Language: E Date: Versin: Versin

2 This prfile is fr infrmatinal purpses nly and may cntain typgraphical errrs and technical inaccuracies. The cntent is prvided as-is, withut express r implied warranties f any kind. If there is n separate agreement between yu and Dell with regard t feedback t Dell n this prfile specificatin, yu agree any feedback yu prvide t Dell regarding this prfile specificatin will be wned and can be freely used by Dell. Cpyright 2017 Dell Inc. r its subsidiaries. All rights reserved. Dell, EMC, and ther trademarks are trademarks f Dell Inc. r its subsidiaries. Other trademarks may be trademarks f their respective wners. Versin

3 Cntents 1. Scpe 6 2. Nrmative References 6 3. Terms and Definitins Can Cannt Cnditinal May Need nt Optinal Referencing prfile Shall Shall nt Shuld Shuld nt Implementatin Namespace ENUMERATE GET 8 4. Symbls and Abbreviated Terms CIM idrac CMC RAC 8 5. Synpsis 8 6. Descriptin Implementatin Descriptin DCIM_Accunt - Lcal Accunt Resurce URIs fr WinRM Operatins Class Prperties DCIM_EnabledLgicalElementCapabilities Accunt Capabilities Resurce URIs fr WinRM Operatins Class Prperties 15 Versin

4 7.3. DCIM_LcalUserIdentity - Lcal User s General Security Principal Resurce URIs fr WinRM Operatins Class Prperties DCIM_LANIdentity Lcal User s IPMI ver LAN Security Principal Resurce URIs fr WinRM Operatins Class Prperties DCIM_SerialIdentity Lcal User s IPMI Serial Security Principal Resurce URIs fr WinRM Operatins Class Prperties DCIM_CLPIdentity Lcal User s CLP Security Principal Resurce URIs fr WinRM Operatins Class Prperties DCIM_LcalUserAccuntManagementService - Lcal User Accunt Management Service Resurce URIs fr WinRM Operatins Class Prperties DCIM_IPMIAccuntManagementService - IPMI Accunt Management Service Resurce URIs fr WinRM Operatins Class Prperties DCIM_CLPAccuntManagementService - CLP Accunt Management Service Resurce URIs fr WinRM Operatins Class Prperties DCIM_LcalUserAccuntManagementCapabilities - Lcal User Accunt Management Capabilities Resurce URIs fr WinRM Operatins Class Prperties DCIM_IPMICLPAccuntMangementCapabilities - IPMI/CLIP Accunt Management Capabilities Resurce URIs fr WinRM 23 Versin

5 Operatins Class Prperties DCIM_RegisteredPrfile - DMTF Simple Identity Management Prfile Registratin Resurce URIs fr WinRM Operatins Class Prperties DCIM_LCRegisteredPrfile - DCIM Simple Identity Management Prfile Registratin Resurce URIs fr WinRM Operatins Class Prperties Methds DCIM_Accunt.RequestStateChange() Use Cases CIM Elements Privilege and License Requirement 27 Versin

6 1. Scpe The DCIM Simple Identity Management Prfile describes the prperties and interfaces fr executing system management tasks related t the management f accunts and identities. The prfile standardizes and aggregates the descriptin fr the platfrm s basic prperties int a system view representatin and prvides static methdlgy fr the clients t query the system views withut substantial traversal f the mdel. 2. Nrmative References Refer t the fllwing dcuments fr mre infrmatin. NOTE: Fr dated references, nly the editin cited applies. Fr undated references, the latest editin f the referenced dcument (including any amendments) applies. DMTF DSP1018, Simple Identity Management DMTF DSP1033, Prfile Registratin Prfile DMTF DSP0226, Web Services fr Management (WS-Management) Specificatin DMTF DSP0227, WS-Management CIM Binding Specificatin Dell Lifecycle Cntrller Best Practices Guide 1.0, Dell WSMAN Licenses and Privileges 1.0 Dell Tech Center MOF Library: Related Managed Object Frmat (MOF) files: DCIM_Accunt.mf DCIM_AccuntCapabilities.mf DCIM_AccuntOnSystem.mf DCIM_AssignedAcctIdent.mf DCIM_EnabledLgicalElementCapabilities.mf DCIM_LcalUserElementCapabilities.mf DCIM_LcalUserIdentity.mf DCIM_LcalUserServiceAffectsIdentity.mf DCIM_LANIdentity.mf DCIM_SerialIdentity.mf DCIM_CLPIdentity.mf DCIM_CLPServiceAffectsIdentity.mf DCIM_LcalUserAccuntManagementService.mf DCIM_IPMIAccuntManagementService.mf DCIM_IPMICLPElementCapabilities.mf DCIM_IPMIServiceAffectsIdentity.mf DCIM_CLPAccuntManagementService.mf DCIM_LcalUserAccuntManagementCapabilities.mf DCIM_IPMICLPAccuntManagementCapabilities.mf DCIM_SPHstedSIMPService.mf Versin

7 DCIM_ElementCnfrmsTPrfile.mf DCIM_RegisteredPrfile.mf DCIM_LCElementCnfrmsTPrfile.mf DCIM_LCRegisteredPrfile.mf 3. Terms and Definitins Fr the purpses f this dcument, the fllwing terms and definitins apply Can Used fr statements f pssibility and capability, whether material, physical, r causal Cannt Used fr statements f pssibility and capability, whether material, physical, r causal Cnditinal Indicates requirements t be fllwed strictly in rder t cnfrm t the dcument when the specified cnditins are met Indicates requirements t be fllwed strictly in rder t cnfrm t the dcument and frm which n deviatin is permitted May Indicates a curse f actin permissible within the limits f the dcument Need nt Indicates a curse f actin permissible within the limits f the dcument Optinal Indicates a curse f actin permissible within the limits f the dcument Referencing prfile Indicates a prfile that wns the definitin f this class and can include a reference t this prfile in its Related Prfiles table Shall Indicates requirements t be fllwed strictly in rder t cnfrm t the dcument and frm which n deviatin is permitted Shall nt Indicates requirements t be fllwed strictly in rder t cnfrm t the dcument and frm which n deviatin is permitted Shuld Indicates that amng several pssibilities, ne is recmmended as particularly suitable, withut mentining r excluding thers, r that a certain curse f actin is preferred but nt necessarily required. Versin

8 3.12. Shuld nt Indicates that a certain pssibility r curse f actin is deprecated but nt prhibited. Interp Namespace: rt/interp Interp Namespace: rt/interp is where instrumentatin instantiates classes t advertise its capabilities fr client discvery Implementatin Namespace rt/dcim Implementatin Namespace: rt/dcim is where instrumentatin instantiates classes relevant t executing cre management tasks ENUMERATE Refers t WS-MAN ENUMERATE peratin as described in Sectin 8.2 f DSP0226_V1.1 and Sectin 9.1 f DSP0227_V GET Refers t WS-MAN GET peratin as defined in Sectin 7.3 f DSP00226_V1.1 and Sectin 7.1 f DSP0227_V Symbls and Abbreviated Terms 4.1. CIM Cmmn Infrmatin Mdel 4.2. idrac Integrated Dell Remte Access Cntrller management cntrller fr blades and mnlithic servers 4.3. CMC Chassis Manager Cntrller management cntrller fr the mdular chassis 4.4. RAC Remte Access Cntrller management cntrller r service prcessr 5. Synpsis Prfile Name: System Inf Versin: Organizatin: Dell CIM Schema Versin: 2.41 Final Dell Schema Versin: Interp Namespace: rt/interp Implementatin Namespace: rt/dcim Central Class: DCIM_LcalUserAccuntManagementService, DCIM_IPMIAccuntManagementService, and DCIM_CLPAccuntManagementService Scping Class: DCIM_CmputerSystem Versin

9 The Dell Simple Identity Management Prfile is a cmpnent prfile that cntains the Dell specific implementatin requirements fr system view. DCIM_LcalUserAccuntManagementService, DCIM_IPMIAccuntManagementService, and DCIM_CLPAccuntManagementService shall be the Central Classes. Table 1 identifies prfiles that are related t this prfile. Table 1. Related Prfiles Prfile Name Organizatin Versin Relatinship Simple Identity Management DMTF 1.0 Specializes Prfile Registratin DCIM 1.0 Reference Versin

10 6. Descriptin The Dell Simple Identity Management Prfile describes platfrm s user accunt prperties and management infrmatin. The user accunt infrmatin is represented by an instance f DCIM_Accunt class. Figure 1 details the class diagram f the Dell Simple Identity Management Prfile. DCIM_LcalUserAccuntManagementCapabilities DCIM_IPMICLPAccuntManagementCapabilities DCIM_SPCmputerSystem DCIM_SPHsted SIMPService DCIM_LcalUserElementCapabilities DCIM_LcalUserAccuntManagementService DCIM_IPMICLPElementCapabilities DCIM_CLPAccuntManagementService DCIM_SPHstedSIMPService DCIM_LcalUserAffectsIdentity DCIM_IPMIAccuntManagementService DCIM_SPHstedSIMPService DCIM_AccuntOnSystem DCIM_IPMIServiceAffectsIdentity DCIM_CLPService AffectsIdentity DCIM_LcalUserIdentity DCIM_Accunt DCIM_Assigned AcctIdentity DCIM_LANIdentity DCIM_AccuntCapabilities DCIM_SerialIdentity DCIM_EnabledLgicalElementCapabilities DCIM_CLPIdentity DCIM_ElementCnfrmsTPrfile Implementatin Namespace DCIM_LCElementCnfrmsTPrfile Interp Namespace DCIM_RegisteredPrfile DCIM_ LCRegisteredPrfile Figure 1. Class Diagram Figure 2 and Figure 3 detail typical Dell Simple Identity Management Prfile implementatin fr RAC user accunts. Fr the client t discver the instrumentatin RBAHstedService s supprt f this prfile, SimpleIdentityManagementPrfile is instantiated in the Implementatin Namespace: rt/dcim. SimpleIdentityManagementPrfile describes the infrmatin abut the implemented prfile: mst imprtantly, the name and versin f the prfile and the rganizatin name that prduced the prfile. Versin

11 SPCmputerSystem SPHstedSIMPService CLPAccuntManagementService LcalUserCLPAccuntManagementService IPMIAccuntManagementService Implementatin Namespace Interp Namespace ElementCnfrmsTPrfile LCElementCnfrmsTPrfile RegisteredPrfile LCRegisteredPrfile Figure 2. Simple Identity Management Prfile CLPAccuntManagementCapabilities LcalUserAccuntManagementCapabilities IPMIAccuntManagementCapabilities SPCmputerSystem SPHstedSIMP Service ElementCapabilities LcalUserAccuntManagementService ElementCapabilities ElementCapabilities CLPAccuntManagementService SPHstedService SPHstedService ServiceAffectsElement IPMIAccuntManagementService AccuntOnSystem ServiceAffectsElement ServiceAffectsElement LcalUserIdentity Accunt AssignedAcct Identity LANIdentity ElementCapabilities SerialIdentity EnabledLgicalElementCapabilities CLPIdentity Figure 3. Simple Identity Management Prfile Implementatin Versin

12 7. Implementatin Descriptin This sectin describes the requirements and guidelines fr implementing the Dell Simple Identity Management Prfile. Table 2. Element Name Classes DCIM_Accunt Class Requirements: Simple Identity Management Prfile DCIM_AccuntCapabilities DCIM_AccuntOnSystem DCIM_AssignedAcctIdent DCIM_EnabledLgicalElementCapabilities DCIM_LcalUserElementCapabilities DCIM_LcalUserIdentity DCIM_LcalUserServiceAffectsIdentity DCIM_LANIdentity DCIM_SerialIdentity DCIM_CLPIdentity Requirement Descriptin Implementatin Namespace: rt/dcim. See sectin 0. Implementatin Namespace: rt/dcim. See sectin 0 and 7.2. Implementatin Namespace: rt/dcim. See sectin 0. Implementatin Namespace: rt/dcim. See sectin 0, 7.3, 7.4, 7.5and 0. Implementatin Namespace: rt/dcim. See sectin 7.2. Implementatin Namespace: rt/dcim. See sectin 0 and Implementatin Namespace: rt/dcim. See sectin7.3. Implementatin Namespace: rt/dcim. See sectin7.3 and 0. Implementatin Namespace: rt/dcim. See sectin 7.4. Implementatin Namespace: rt/dcim. See sectin 7.5. Implementatin Namespace: rt/dcim. See sectin0. Versin

13 Element Name DCIM_CLPServiceAffectsIdentity DCIM_LcalUserAccuntManagementService DCIM_IPMIAccuntManagementService DCIM_IPMICLPElementCapabilities DCIM_IPMIServiceAffectsIdentity DCIM_CLPAccuntManagementService Requirement Descriptin DCIM_LcalUserAccuntManagementCapabilities DCIM_IPMICLPAccuntManagementCapabilities DCIM_SPHstedSIMPService DCIM_ElementCnfrmsTPrfile DCIM_RegisteredPrfile DCIM_LCElementCnfrmsTPrfile DCIM_LCRegisteredPrfile Implementatin Namespace: rt/dcim. See sectin0 and 7.9. Implementatin Namespace: rt/dcim. See sectin 0. Implementatin Namespace: rt/dcim. See sectin 7.8. Implementatin Namespace: rt/dcim. See sectin 7.8, 7.9 and Implementatin Namespace: rt/dcim. See sectin 7.4, 7.5 and 7.8. Implementatin Namespace: rt/dcim. See sectin 7.9. Implementatin Namespace: rt/dcim. See sectin Implementatin Namespace: rt/dcim. See sectin7.11. Implementatin Namespace: rt/dcim. See sectin 0, 7.8 and 7.9. The class shall be implemented in bth the Interp Namespace: rt/interp and Implementatin Namespace: rt/dcim. See sectin Interp Namespace: rt/interp. See sectin The class shall be implemented in bth the Interp Namespace: rt/interp and Implementatin Namespace: rt/dcim. See sectin Interp Namespace: rt/interp. See sectin Versin

14 Element Name Indicatins Nne defined in this prfile Requirement Descriptin 7.1. DCIM_Accunt - Lcal Accunt This sectin describes the implementatin fr the DCIM_Accunt class describes lcal RAC accunt. This class shall be instantiated in the Implementatin Namespace: rt/dcim. The DCIM_AccuntOnSystem assciatin shall reference DCIM_Accunt instances and the DCIM_SPCmputerSystem instance. DCIM_AssignedAcctIdent assciatin shall reference DCIM_Accunt instance and DCIM_LcalUserIdentity, DCIM_LANIdentity, DCIM_SerialIdentity, DCIM_CLPIdentity instances. DCIM_AccuntCapabilities assciatin shall reference DCIM_Accunt instance and DCIM_EnabledLgicalElementCapabilities instance Resurce URIs fr WinRM The class Resurce URI shall be cimnamespace=rt/dcim The key prperty shall be the SystemCreatinClassName, SystemName, CreatinClassName, and Name. The instance Resurce URI fr DCIM_ Accunt instance shall be: Accunt? cimnamespace=rt/dcim+systemcreatinclassname=dcim_spcmputersystem+systemname=s ystemmc+creatinclassname=dcim_accunt+name=idrac.embedded.1#users.<n> Operatins The fllwing table lists the peratins implemented n DCIM_ Accunt. Table 3. DCIM_Accunt - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Set Instance URI Invke Instance URI Class Prperties Nte: Set peratin may mdify nly the UserID and UserPasswrd prperties. The fllwing table details the implemented prperties fr DCIM_Accunt instance representing RAC user accunt infrmatin. There shall be 16 accunts. The Requirements clumn shall dente whether the prperty is implemented (fr requirement definitins, see sectin 3). The Additinal Requirements clumn shall dente either pssible values fr the prperty, r requirements n the value frmulatin. Table 4. DCIM_Accunt - Prperties Prperty Name Requirements Type Additinal Requirement SystemCreatinClassName string The prperty value shall be DCIM_SPCmputerSystem. SystemName string The prperty value shall be systemmc. Versin

15 Prperty Name Requirements Type Additinal Requirement CreatinClassName string This prperty value shall be "DCIM_Accunt". Name string The prperty value shall be the "idrac.embedded.1#users.<n>" where <N> is integer frm 1 t 16. UserID string UserPasswrd[] string The user name shall be a string 16 characters maximum length. A blank array if passwrd is cnfigured; NULL when accunt is nt cnfigured/disabled. OrganizatinName[] string This prperty shall have a value f "DCIM". ElementName string This prperty shall have a value f "DCIM Accunt". RequestedState uint16 This prperty shall have a value f 0 (Unknwn). EnabledState uint16 The prperty value shall be either 2(Enabled) r 3(Disabled) DCIM_EnabledLgicalElementCapabilities Accunt Capabilities This sectin describes the implementatin fr the DCIM_EnabledLgicalElementCapabilities class. DCIM_AccuntCapabilities assciatin shall reference DCIM_Accunt instance and DCIM_EnabledLgicalElementCapabilities instance. This class shall be instantiated in the Implementatin Namespace: rt/dcim Resurce URIs fr WinRM The class Resurce URI shall be EnabledLgicalElementCapabilities? cimnamespace=rt/dcim The key prperty shall be the InstanceID. The instance Resurce URI fr DCIM_SystemInteger instance shall be: cimnamespace=rt/dcim+instanceid=dcim_enabledl gicalelementcapabilities: Operatins The fllwing table lists the peratins implemented n DCIM_EnabledLgicalElementCapabilities. Table 5. DCIM_EnabledLgicalElementCapabilities - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties Table 6. DCIM_EnabledLgicalElementCapabilities - Prperties Prperty Name Type Requirement Additinal Requirement InstanceID string This prperty shall have a value f " DCIM_EnabledLgicalElementCapabilities:1" Versin

16 Prperty Name Type Requirement Additinal Requirement ElementName string This prperty shall have a value f "Accunt Capabilities" RequestedStatesSupprted[] uint16 ElementNameEditSupprted blean The prperty value shall be an array f [2(Enabled), 3(Disabled)] This prperty shall have a value f FALSE. MaxElementNameLen uint16 This prperty shall have a value f DCIM_LcalUserIdentity - Lcal User s General Security Principal This sectin describes the implementatin fr the DCIM_LcalUserIdentity class. This class shall be instantiated in the Implementatin Namespace: rt/dcim. DCIM_AssignedAcctIdent assciatin shall reference DCIM_LcalUserIdentity instance and DCIM_Accunt instance. DCIM_LcalUserServiceAffectsIdentity shall reference DCIM_LcalUserIdentity instance and the DCIM_LcalUserAccuntManagementService instance Resurce URIs fr WinRM The class Resurce URI shall be DCIM_LcalUserIdentity? cimnamespace=rt/dcim The key prperty shall be the InstanceID. The instance Resurce URI fr DCIM_ SystemEnumeratin instance shall be: DCIM_LcalUserIdentity? cimnamespace=rt/dcim+instanceid=dcim:lcalaccunt:identity:<n> Operatins The fllwing table lists the peratins implemented n DCIM_LcalUserIdentity. Table 7. DCIM_LcalUserIdentity - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties Table 8. DCIM_LcalUserIdentity Prperties Prperties Type Requirement Additinal Requirements InstanceId string The prperty value shall be DCIM:LcalAccunt:Identity:<N>, where <N> is frm 1 t 16. ElementName String This prperty shall have a value f Lcal User Identity" DCIM_LANIdentity Lcal User s IPMI ver LAN Security Principal This sectin describes the implementatin fr the DCIM_LANIdentity class. This class shall be instantiated in the Implementatin Namespace: rt/dcim. DCIM_AssignedAcctIdent assciatin shall reference DCIM_LANIdentity instance and DCIM_Accunt instance. Versin

17 DCIM_IPMIServiceAffectsIdentity shall reference the DCIM_IPMIAccuntManagementService instance and DCIM_LANIdentity instance Resurce URIs fr WinRM The class Resurce URI shall be DCIM_LANIdentity? cimnamespace=rt/dcim The key prperty shall be the InstanceID. The instance Resurce URI fr DCIM_LANIdentity instance shall be: DCIM_LANIdentity? cimnamespace=rt/dcim+instanceid=dcim:lanuser:identity:<n> Operatins The fllwing table lists the peratins implemented n DCIM_LANIdentity. Table 9. DCIM_LANIdentity - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties Table 10. DCIM_LANIdentity Prperties Prperties Type Requirement Additinal Requirements InstanceId string The prperty value shall be DCIM:LANUser:Identity:<N> where N is 1 t 16. ElementName String This prperty shall have a value f LAN Identity" 7.5. DCIM_SerialIdentity Lcal User s IPMI Serial Security Principal This sectin describes the implementatin fr the DCIM_SerialIdentity class. This class shall be instantiated in the Implementatin Namespace: rt/dcim. DCIM_AssignedAcctIdent assciatin shall reference DCIM_SerialIdentity instance and DCIM_Accunt instance. DCIM_IPMIServiceAffectsIdentity shall reference the DCIM_IPMIAccuntManagementService instance and DCIM_SerialIdentity instance Resurce URIs fr WinRM The class Resurce URI shall be DCIM_SerialIdentity? cimnamespace=rt/dcim The key prperty shall be the InstanceID. The instance Resurce URI fr DCIM_SerialIdentity instance shall be: DCIM_SerialIdentity? cimnamespace=rt/dcim+instanceid=dcim:serialuser:identity:<n>" Operatins The fllwing table lists the peratins implemented n DCIM_SerialIdentity. Versin

18 Table 11. DCIM_SerialIdentity - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties Table 12. DCIM_SerialIdentity Prperties Prperties Type Requirement Additinal Requirements InstanceId string The prperty value shall be DCIM:SerialUser:Identity:<N>" where <N> is 1 t 16. ElementName string This prperty shall have a value f Serial Identity" 7.6. DCIM_CLPIdentity Lcal User s CLP Security Principal This sectin describes the implementatin fr the DCIM_CLPIdentity class. This class shall be instantiated in the Implementatin Namespace: rt/dcim. DCIM_AssignedAcctIdent assciatin shall reference DCIM_CLPIdentity instance and DCIM_Accunt instance. DCIM_CLPServiceAffectsIdentity assciatin shall reference DCIM_CLPIdentity instance and the DCIM_CLPAccuntManagementService Resurce URIs fr WinRM The class Resurce URI shall be DCIM_CLPIdentity? cimnamespace=rt/dcim The key prperty shall be the InstanceID. The instance Resurce URI fr DCIM_CLPIdentity instance shall be: DCIM_CLPIdentity? cimnamespace=rt/dcim+instanceid=dcim:clp:identity:<n> Operatins The fllwing table lists the peratins implemented n DCIM_CLPIdentity. Table 13. DCIM_CLPIdentity - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties Table 14. DCIM_CLPIdentity Prperties Prperties Type Requirement Additinal Requirements InstanceId string The prperty value shall be DCIM:CLP:Identity:<N>, where <N> is 1 t 16. ElementName string This prperty shall have a value f CLP Identity". Versin

19 7.7. DCIM_LcalUserAccuntManagementService - Lcal User Accunt Management Service This sectin describes the implementatin fr the DCIM_LcalUserAccuntManagementService class. DCIM_LcalUserElementCapabilities assciatin shall reference the DCIM_LcalUserAccuntManagementService and the DCIM_LcalUserAccuntManagementCapabilities instance. DCIM_LcalUserServiceAffectsIdentity assciatin shall reference DCIM_LcalUserIdentity instance and the DCIM_LcalUserAccuntManagementService instance. DCIM_SPHstedSIMPService assciatin shall reference the DCIM_LcalUserAccuntManagementService instance and the DCIM_SPCmputerSystem. This class shall be instantiated in the Implementatin Namespace: rt/dcim Resurce URIs fr WinRM The class Resurce URI shall be DCIM_LcalUserAccuntManagementService? cimnamespace=rt/dcim The key prperty shall be the SystemCreatinClassName, SystemName, CreatinClassName, and Name. The instance Resurce URI fr DCIM_LcalUserAccuntManagementService instance shall be: cimnamespace=rt/dcim+systemcreatinclassna me=dcim_spcmputersystem+systemname=systemmc+creatinclassname=dcim_lcaluseraccuntmanag ementservice+name=dcim:lcaluseraccuntmanagementservice Operatins The fllwing table lists the peratins implemented n DCIM_LcalUserAccuntManagementService. Table 15. DCIM_LcalUserAccuntManagementService - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties The fllwing table details the implemented prperties fr DCIM_LcalUserAccuntManagementService instance representing. The Requirements clumn shall dente whether the prperty is implemented (fr requirement definitins, see sectin 3). The Additinal Requirements clumn shall dente either pssible values fr the prperty, r requirements n the value frmulatin. Table 16. DCIM_LcalUserAccuntManagementService - Prperties Prperty Name Type Requirements Additinal Requirement SystemCreatinClassName string The prperty value shall be DCIM_SPCmputerSystem. SystemName string The prperty value shall be systemmc. CreatinClassName string Name string The prperty value shall be "DCIM:LcalUserAccuntManagementService". The prperty value shall be "DCIM LcalUserAccuntManagementService". Versin

20 Prperty Name Type Requirements Additinal Requirement RequestedState uint16 This prperty value shall be 12 (nt applicable). EnabledState uint16 This prperty value shall be 2 (Enabled). ElementName string CurrentAuthenticatinMethd uint16 The prperty value shall be "Lcal User Accunt Management Service ". The prperty shall represent the lcal authenticatin methdlgies used: 0 - "Nrmal, 1 - "SmartCard withut CRL", 2 - "SmartCard with CRL", 3 - "bimetrics withut CRL", 4 - "bimetrics with CRL" 7.8. DCIM_IPMIAccuntManagementService - IPMI Accunt Management Service This sectin describes the implementatin fr the DCIM_IPMIAccuntManagementService class. DCIM_IPMICLPElementCapabilities assciatin shall reference the DCIM_IPMIAccuntManagementService instance and the DCIM_IPMICLPAccuntMangementCapabilities instance. DCIM_IPMIServiceAffectsIdentity assciatin shall reference the DCIM_IPMIAccuntManagementService instance and DCIM_LANIdentity, DCIM_SerialIdentity instances. DCIM_SPHstedSIMPService assciatin shall reference the DCIM_IPMIAccuntManagementService instance and the DCIM_SPCmputerSystem. This class shall be instantiated in the Implementatin Namespace: rt/dcim Resurce URIs fr WinRM The class Resurce URI shall be DCIM_IPMIAccuntManagementService? cimnamespace=rt/dcim The key prperty shall be the SystemCreatinClassName, SystemName, CreatinClassName, and Name. The instance Resurce URI fr DCIM_IPMIAccuntManagementService instance shall be: DCIM_IPMIAccuntManagementService? cimnamespace=rt/dcim+systemcreatinclassname=dcim_spc mputersystem+systemname=systemmc+creatinclassname=dcim_ipmiaccuntmanagementservice+name= DCIM IPMIAccuntManagementService Operatins The fllwing table lists the peratins implemented n DCIM_IPMIAccuntManagementService. Table 17. DCIM_IPMIAccuntManagementService - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Versin

21 Class Prperties The fllwing table details the implemented prperties fr DCIM_IPMIAccuntManagementService instance representing. The Requirements clumn shall dente whether the prperty is implemented (fr requirement definitins, see sectin 3). The Additinal Requirements clumn shall dente either pssible values fr the prperty, r requirements n the value frmulatin. Table 18. DCIM_IPMIAccuntManagementService - Prperties Prperty Name Type Requirements Additinal Requirement SystemCreatinClassName string The prperty value shall be DCIM_SPCmputerSystem. SystemName string The prperty value shall be systemmc. CreatinClassName string Name string The prperty value shall be "DCIM_IPMIAccuntManagementService". The prperty value shall be "DCIM IPMIAccuntManagementService". RequestedState uint16 This prperty value shall be 12 (nt applicable). EnabledState uint16 The prperty value shall be 2 (Enabled). ElementName string The prperty value shall be "IPMI Accunt Management Service " DCIM_CLPAccuntManagementService - CLP Accunt Management Service This sectin describes the implementatin fr the DCIM_CLPAccuntManagementService class. DCIM_IPMICLPElementCapabilities shall reference the DCIM_CLPAccuntManagementService instance and the DCIM_IPMICLPAccuntMangementCapabilities instance. DCIM_CLPServiceAffectsIdentity assciatin shall reference DCIM_CLPIdentity instance and the DCIM_CLPAccuntManagementService. DCIM_SPHstedSIMPService assciatin shall reference the DCIM_CLPAccuntManagementService instance and the DCIM_SPCmputerSystem. This class shall be instantiated in the Implementatin Namespace: rt/dcim Resurce URIs fr WinRM The class Resurce URI shall be DCIM_CLPAccuntManagementService? cimnamespace=rt/dcim The key prperty shall be the SystemCreatinClassName, SystemName, CreatinClassName, and Name. The instance Resurce URI fr CLPAccuntManagementService instance shall be: DCIM_ CLPAccuntManagementService? cimnamespace=rt/dcim+systemcreatinclassname=dcim_spcmputer System+SystemName=systemmc+CreatinClassName=DCIM_CLPAccuntManagementService+Name=DCIM CLPAccuntManagementService Versin

22 Operatins The fllwing table lists the peratins implemented n DCIM_CLPAccuntManagementService. Table 19. DCIM_CLPAccuntManagementService - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties The fllwing table details the implemented prperties fr DCIM_CLPAccuntManagementService instance. The Requirements clumn shall dente whether the prperty is implemented (fr requirement definitins, see sectin 3). The Additinal Requirements clumn shall dente either pssible values fr the prperty, r requirements n the value frmulatin. Table 20. DCIM_CLPAccuntManagementService - Prperties Prperty Name Type Requirements Additinal Requirement SystemCreatinClassName string The prperty value shall be DCIM_SPCmputerSystem SystemName string The prperty value shall be systemmc CreatinClassName string Name string The prperty value shall be "DCIM_CLPAccuntManagementService" The prperty value shall be "DCIM CLPAccuntManagementService" RequestedState uint16 This prperty value shall be 12 (nt applicable) EnabledState uint16 This prperty value shall be 2 (Enabled) ElementName string This prperty value shall be "CLP Accunt Management Service " DCIM_LcalUserAccuntManagementCapabilities - Lcal User Accunt Management Capabilities This sectin describes the implementatin fr the DCIM_LcalUserAccuntManagementCapabilities class. DCIM_LcalUserElementCapabilities assciatin shall reference the DCIM_LcalUserAccuntManagementService and the DCIM_LcalUserAccuntManagementCapabilities instance. This class shall be instantiated in the Implementatin Namespace: rt/dcim Resurce URIs fr WinRM The class Resurce URI shall be cimnamespace=rt/dcim The key prperty shall be the InstanceID. The instance Resurce URI fr DCIM_LcalUserAccuntManagementCapabilities instance shall be: cimnamespace=rt/dcim+instanceid=dcim:lc aluseraccuntmanagementcapabilities:1 Versin

23 Operatins The fllwing table lists the peratins implemented n DCIM_LcalUserAccuntManagementCapabilities. Table 21. DCIM_LcalUserAccuntManagementCapabilities - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties Table 22. DCIM_LcalUserAccuntManagementCapabilities - Prperties Prperty Name Type Requirement Additinal Requirements InstanceID string ElementName string This prperty shall have a value f " DCIM:LcalUserAccuntManagementCapabilities:1" This prperty shall have a value f " Lcal User Accunt Mangement Capabilities" OperatinsSupprted[] uint16 This prperty shall have a value f 3 (Mdify) ElementNameEditSupprted blean This prperty shall have a value f FALSE MaxElementNameLen uint16 This prperty shall have a value f 0 SupprtedAuthenticatinMethd uint16 The prperty shall represent the lcal authenticatin methdlgy available: 0 - "Nrmal, 1 - "SmartCard withut CRL", 2 - "SmartCard with CRL", 3 - "bimetrics withut CRL", 4 - "bimetrics with CRL" DCIM_IPMICLPAccuntMangementCapabilities - IPMI/CLIP Accunt Management Capabilities This sectin describes the implementatin fr the DCIM_IPMICLPAccuntMangementCapabilities class. DCIM_IPMICLPElementCapabilities shall reference DCIM_IPMICLPAccuntMangementCapabilities instance and the DCIM_CLPAccuntManagementService, DCIM_IPMIAccuntManagementService instances. This class shall be instantiated in the Implementatin Namespace: rt/dcim Resurce URIs fr WinRM The class Resurce URI shall be cimnamespace=rt/dcim The key prperty shall be the InstanceID. The instance Resurce URI fr DCIM_IPMICLPAccuntMangementCapabilities instance shall be: cimnamespace=rt/dcim+instanceid=dcim:ipmi CLPAccuntManagementCapabilities:1 Versin

24 Operatins The fllwing table lists the peratins implemented n DCIM_IPMICLPAccuntMangementCapabilities. Table 23. DCIM_IPMICLPAccuntMangementCapabilities - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties Table 24. DCIM_IPMICLPAccuntMangementCapabilities - Prperties Prperty Name Type Requirement Requirement InstanceID string ElementName string The prperty value be "DCIM:IPMICLPAccuntManagementCapabilities:1" The prperty value shall be f "IPMI/CLP Accunt Mangement Capabilities". OperatinsSupprted[] uint16 The prperty array shall cntain value 3 (Mdify). ElementNameEditSupprted blean This prperty value shall be FALSE. MaxElementNameLen uint16 This prperty value shall be DCIM_RegisteredPrfile - DMTF Simple Identity Management Prfile Registratin This sectin describes the implementatin fr the DCIM_RegisteredPrfile class. This class shall be instantiated in the Interp Namespace: rt/interp. The DCIM_ElementCnfrmsTPrfile shall reference the DCIM_RegisteredPrfile instance Resurce URIs fr WinRM The class Resurce URI shall be " cimnamespace=rt/interp" The key prperty shall be the InstanceID prperty. The instance Resurce URI shall be: cimnamespace=rt/interp+instanceid= DCIM:SimpleIdentityRegisteredPrfile: Operatins The fllwing table lists the peratins implemented n fr DCIM_RegisteredPrfile. Table 25. DCIM_RegisteredPrfile - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties The fllwing table details the implemented prperties fr DCIM_RegisteredPrfile instance representing Simple Identity Management Prfile implementatin. The Requirements clumn shall dente whether the prperty is Versin

25 implemented (fr requirement definitins, see sectin 3). The Additinal Requirements clumn shall dente either pssible values fr the prperty, r requirements n the value frmulatin. Table 26. DCIM_RegisteredPrfile Prperty Name Type Requirement Additinal Requirements InstanceID string DCIM:SimpleIdentityRegisteredPrfile:1 RegisteredName string This prperty shall have a value f "Simple Identity Management". RegisteredVersin string This prperty shall have a value f "1.0.0". RegisteredOrganizatin uint16 This prperty shall have a value f 2(DMTF). AdvertiseTypes[] uint16 The prperty array shall have value [1 (Other), 1 (Other)]. AdvertiseTypeDescriptins[] string The prperty array shall have value ["WS-Identify", "Interp Namespace"] DCIM_LCRegisteredPrfile - DCIM Simple Identity Management Prfile Registratin This sectin describes the implementatin fr the DCIM_LCRegisteredPrfile class. This class shall be instantiated in the Interp Namespace: rt/interp. The DCIM_LCElementCnfrmsTPrfile assciatin shall reference the DCIM_LCRegisteredPrfile instance Resurce URIs fr WinRM The class Resurce URI shall be " cimnamespace=rt/interp" The key prperty shall be the InstanceID prperty. The instance Resurce URI shall be: cimnamespace=rt/interp+instanceid= DCIM:SimpleIdentityManagement: Operatins The fllwing table lists the peratins implemented n fr DCIM_LCRegisteredPrfile. Table 27. DCIM_LCRegisteredPrfile - Operatins Operatin Name Requirements Required Input Get Instance URI Enumerate Class URI Class Prperties The fllwing table details the implemented prperties fr DCIM_LCRegisteredPrfile instance representing Simple Identity Management Prfile implementatin. The Requirements clumn shall dente whether the prperty is implemented (fr requirement definitins, see sectin 3). The Additinal Requirements clumn shall dente either pssible values fr the prperty, r requirements n the value frmulatin. Versin

26 Table 28. DCIM_LCRegisteredPrfile Prperty Name Type Requirement Additinal Requirements InstanceID string DCIM:SimpleIdentityManagement:1.0.0 RegisteredName string This prperty value shall be "Simple Identity Management". RegisteredVersin string This prperty value shall be "1.0.0". RegisteredOrganizatin uint16 This prperty value shall be 1(Other) OtherRegisteredOrganizatin string This prperty value shall be DCIM AdvertiseTypes[] uint16 The prperty array shall have value [1 (Other), 1 (Other)]. AdvertiseTypeDescriptins[] string PrfileRequireLicense[] string PrfileRequireLicenseStatus[] string 8. Methds The prperty array shall have value ["WS-Identify", "Interp Namespace"] This prperty array shall describe the required licenses fr this prfile. If n license is required fr the prfile, the prperty shall have value NULL. This prperty array shall cntain the status fr the crrespnding license in the same element index f the PrfileRequireLicense array prperty. Each array element shall cntain: LICENSED NOT_LICENSED If n license is required fr the prfile, the prperty shall have value NULL. This sectin details the requirements fr supprting extrinsic methds fr the CIM elements defined by this prfile DCIM_Accunt.RequestStateChange() The RequestStateChange() methd shall be used t enable/disable the accunt represented by the DCIM_Accunt instance. Return cde values fr the RequestStateChange() methd are specified in Table 29 and parameters are specified in Table 30. Invking the RequestStateChange() methd multiple times can result in the earlier requests being verwritten r lst. Table 29. Value DCIM_Accunt.RequestStateChange()Methd: Return Cde Values Descriptin 0 Request was successfully executed. 2 Errr ccurred Versin

27 Table 30. DCIM_Accunt.RequestStateChange() Methd: Parameters Qualifiers Name Type Descriptin/Values IN, REQ RequestedState uint16 OUT MessageID string OUT Message string Valid state values: 2 (Enabled) 3 (Disabled) Errr Message ID may be used t lk-up in the Dell Message registry files. Fr mre infrmatin, see Errr Message Registry. Errr Message in English crrespnding t MessageID is returned if the methd fails t execute OUT MessageArguments[] string Substitutin variables fr dynamic errr messages Table 31. DCIM_Accunt.RequestStateChange() Methd: Standard Messages MessageID (OUT parameter) Message MessageArguments[] USR102 Invalid parameter value fr <parameter> RequestedState USR103 Missing parameter(s) <parameter> RequestedState USR104 USR Use Cases The cmmand failed The accunt is nt cnfigured See Lifecycle Cntrller (LC) Integratin Best Practices Guide. 10. CIM Elements N additinal details specified. 11. Privilege and License Requirement The fllwing table describes the privilege and license requirements fr the listed peratins. Fr the detailed explanatin f the privileges and licenses, refer t the Dell WSMAN Licenses and Privileges specificatin. Table 32. Privilege and License Requirements Class and Methd Operatin User Privilege Required Required License DCIM_Accunt ENUMERATE, GET Lgin Nne. DCIM_Accunt. RequestStateChange() INVOKE Lgin, Cnfigure Users Nne. DCIM_Accunt SET Lgin, Cnfigure Users Nne. DCIM_AccuntCapabilities ENUMERATE, GET Lgin Nne. DCIM_AccuntOnSystem ENUMERATE, GET Lgin Nne. DCIM_AssignedAcctIdent ENUMERATE, GET Lgin Nne. DCIM_EnabledLgicalElementCapabilities ENUMERATE, GET Lgin Nne. DCIM_LcalUserElementCapabilities ENUMERATE, GET Lgin Nne. DCIM_LcalUserIdentity ENUMERATE, GET Lgin Nne. DCIM_LcalUserServiceAffectsIdentity ENUMERATE, GET Lgin Nne. DCIM_LANIdentity ENUMERATE, GET Lgin Nne. Versin

28 Class and Methd Operatin User Privilege Required Required License DCIM_SerialIdentity ENUMERATE, GET Lgin Nne. DCIM_CLPIdentity ENUMERATE, GET Lgin Nne. DCIM_CLPServiceAffectsIdentity ENUMERATE, GET Lgin Nne. DCIM_LcalUserAccuntManagementService ENUMERATE, GET Lgin Nne. DCIM_IPMIAccuntManagementService ENUMERATE, GET Lgin Nne. DCIM_IPMICLPElementCapabilities ENUMERATE, GET Lgin Nne. DCIM_IPMIServiceAffectsIdentity ENUMERATE, GET Lgin Nne. DCIM_CLPAccuntManagementService ENUMERATE, GET Lgin Nne. DCIM_LcalUserAccuntManagementCapabilities ENUMERATE, GET Lgin Nne. DCIM_IPMICLPAccuntManagementCapabilities ENUMERATE, GET Lgin Nne. DCIM_SPHstedSIMPService ENUMERATE, GET Lgin Nne. DCIM_ElementCnfrmsTPrfile ENUMERATE, GET Lgin Nne. DCIM_RegisteredPrfile ENUMERATE, GET Lgin Nne. DCIM_LCElementCnfrmsTPrfile ENUMERATE, GET Lgin Nne. DCIM_LCRegisteredPrfile ENUMERATE, GET Lgin Nne. Versin