Package weblogic.management.runtime

Interface CertificateManagementServerRuntimeMBean

All Superinterfaces:

javax.management.DynamicMBean, javax.management.MBeanRegistration, javax.management.NotificationBroadcaster, RuntimeMBean, WebLogicMBean

public interface CertificateManagementServerRuntimeMBean
extends RuntimeMBean

This class is used to monitor and manage certificate service runtime information..

Method Summary

Modifier and Type	Method	Description
boolean	refreshActiveServerCertificates()	Refresh all active certificates for the server.
boolean	refreshMachineTrust()	Get the latest domain trust anchors from the admin server (or the local certificate service if on the admin server), and update the local machine's bootstrap trust keystore.
boolean	refreshServerCertificate(java.lang.String alias, boolean isActiveOnly, boolean isForceUpdate)	Refresh the server certificate for alias alias.
boolean	refreshServerTrust()	Get the latest domain trust anchors from the admin server (or the local certificate service if on the admin server).

Methods inherited from interface javax.management.DynamicMBean

getAttribute, getAttributes, invoke, setAttribute, setAttributes

Methods inherited from interface javax.management.MBeanRegistration

postDeregister, postRegister, preRegister

Methods inherited from interface javax.management.NotificationBroadcaster

addNotificationListener, getNotificationInfo, removeNotificationListener

Methods inherited from interface weblogic.management.runtime.RuntimeMBean

addPropertyChangeListener, removePropertyChangeListener

Methods inherited from interface weblogic.management.WebLogicMBean

getMBeanInfo, getName, getObjectName, getParent, getType, isCachingDisabled, isRegistered, setName, setParent

Method Detail

refreshServerTrust

boolean refreshServerTrust()
                    throws ManagementException

Get the latest domain trust anchors from the admin server (or the local certificate service if on the admin server).

Throws:

ManagementException

Access limited to the following security roles:

Operator

refreshMachineTrust

boolean refreshMachineTrust()
                     throws ManagementException

Get the latest domain trust anchors from the admin server (or the local certificate service if on the admin server), and update the local machine's bootstrap trust keystore.

Throws:

ManagementException

Access limited to the following security roles:

Operator

refreshServerCertificate

boolean refreshServerCertificate(java.lang.String alias,
                                 boolean isActiveOnly,
                                 boolean isForceUpdate)
                          throws ManagementException

Refresh the server certificate for alias alias. When invoked on a Managed Server, the authenticated WebLogic caller's identity is delegated to the Admin Server certificate service. This is an authenticated manual runtime operation. When isActiveOnly is false, it permits any valid alias whether that alias is bound to this server, bound only to another server, or not yet bound to any server. Automatic certificate refresh does not use this broader selection and remains restricted to active aliases.

Parameters:

alias - The alias of the certificate to refresh. Aliases are case-insensitive.

isActiveOnly - If true, the certificate will only be refreshed if the alias is in use by an enabled channel or service, or is a built-in Domain PKI alias. If false, any valid alias may be refreshed, including an alias configured for this server, configured only for another server, or not yet configured for any server. This permits certificate pre-provisioning before a channel or service is enabled; automatic refresh remains active-only.

isForceUpdate - If true, force the certificate to be updated even if it is already present and valid. Normally, certificates are only updated if they are missing or invalid (expired).

Throws:

ManagementException

Access limited to the following security roles:

Operator

refreshActiveServerCertificates

boolean refreshActiveServerCertificates()
                                 throws ManagementException

Refresh all active certificates for the server. An active certificate is a built-in Domain PKI certificate or a certificate configured for use by an enabled channel or service. When invoked on a Managed Server, the authenticated WebLogic caller's identity is delegated to the Admin Server certificate service.

Throws:

ManagementException

Access limited to the following security roles:

Operator