Customizing the Management Information Base

For each Simple Network Management Protocol (SNMP) channel object, you must generate and distribute the venafi.mib file to the SNMP management console. If you change event definitions, or if you upgrade to a new version of Trust Protection Foundation, you can should and redistribute the .mib file.

To generate the file, you run the GenerateMIB utility. GenerateMIB maps events to specific Object Identifiers (OID)s in the .mib file. The OIDs include the Trust Protection Foundation event fields and descriptive event text so administrators can look for specific traps in their monitoring systems.

To generate the CyberArk Trust Protection Foundation MIB file

  1. Open CyberArk Configuration Console or the CyberArk Tools MMC Snap-in.

    NOTE  You must have Read, Write permission to the event definitions.

  2. Open the Tools > Logging > Event Definitions node and make the desired changes.

    Now that the event definitions have changes, you need to actually generate the .mib file.

  3. On the CyberArk Trust Protection Foundation - Self-Hosted server, open a command prompt.
  4. Browse to the [drive]:\Program Files\CyberArk\Platform directory.

  5. Run the GenerateMIB.exe utility:

    Generatemib.exe [-n:<mibname>] [-m:<modulename>] [-o:<outfile>] -c [-?|-h]

    Example:

    Generatemib.exe –n:VENAFI-MIB -m:MyCustomName –o:VENAFI-MIB.txt -c

    The -m switch is optional and allows you to provide a custom module name that will be displayed in your SNMP management system.

    The -c switch should always be used and ensures the data is refreshed from the configuration.

    This program creates the venafi.mib file in the current directory.

    An example of a customized MIB entry is the following:

    customizedNoCATemplate NOTIFICATION-TYPE

    OBJECTS { eventComponent, eventSeverity, eventClientIpAddressType, eventClientIpAddress, publicKeyFingerprint-11, certificateFolder, translatedEvent }

    STATUS current

    DESCRIPTION "Customized - No CA Template"

    ::= {director 3276817}

     

  1. Distribute the MIB file to the SNMP management console.
  2. Each time you change event definitions, re-run the GenerateMIB utility and redistribute the resulting venafi.mib file.