Certificate validity monitor type

SystemCenterCentral.Utilities.Certificates.CertificateValidity.MonitorType (UnitMonitorType)

Element properties:

Show References:
- Unit Monitors (1)
RunAs	Default
Accessibility	Internal
Support Monitor Recalculate	False
Member Modules:

ID	Module Type	TypeId	RunAs
ScriptDS	DataSource	SystemCenterCentral.Utilities.Certificates.ScriptDataSource	Default
CertificateInstance	ConditionDetection	System.ExpressionFilter	Default
CertNotValid	ConditionDetection	System.ExpressionFilter	Default
CertValid	ConditionDetection	System.ExpressionFilter	Default
CorrectInstance	ConditionDetection	System.ExpressionFilter	Default
Overrideable Parameters:

ID	ParameterType	Selector
IgnoreUntrustedRoot	bool	$Config/IgnoreUntrustedRoot$
SpreadInitializationOverInterval	int	$Config/SpreadInitializationOverInterval$
Debug	bool	$Config/Debug$
Source Code:

<UnitMonitorType ID="SystemCenterCentral.Utilities.Certificates.CertificateValidity.MonitorType" Accessibility="Internal">

  <MonitorTypeStates>

    <MonitorTypeState ID="Good" NoDetection="false"/>

    <MonitorTypeState ID="Bad" NoDetection="false"/>

  </MonitorTypeStates>

  <Configuration>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="CertStoreID" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="StoreProvider" type="xsd:string" default="System"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="StoreType" type="xsd:string" default="LocalMachine"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="CertThumbprint" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="RevocationFlag" type="xsd:string" default="EntireChain"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="RevocationMode" type="xsd:string" default="Online"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="VerificationFlags" type="xsd:string" default="IgnoreCertificateAuthorityRevocationUnknown,IgnoreEndRevocationUnknown"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="SubjectIncludeRegEx" type="xsd:string" default="^.*$"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="IssuerIncludeRegEx" type="xsd:string" default="^.*$"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="SubjectExcludeRegEx" type="xsd:string" default="^$"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="IssuerExcludeRegEx" type="xsd:string" default="^$"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="EnhKeyUseIncludeRegEx" type="xsd:string" default="^(|.+)$"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="EnhKeyUseExcludeRegEx" type="xsd:string" default="^$"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="TemplateIncludeRegEx" type="xsd:string" default="^(|.+)$"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="TemplateExcludeRegEx" type="xsd:string" default="\s+"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="IgnoreSupersededCert" type="xsd:boolean"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="IgnoreUntrustedRoot" type="xsd:boolean" default="false"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="IntervalSeconds" type="xsd:integer"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="SyncTime" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="0" name="SpreadInitializationOverInterval" type="xsd:integer" default="900"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="TimeoutSeconds" type="xsd:integer"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="Debug" type="xsd:boolean"/>

  </Configuration>

  <OverrideableParameters>

    <OverrideableParameter ID="IgnoreUntrustedRoot" Selector="$Config/IgnoreUntrustedRoot$" ParameterType="bool"/>

    <OverrideableParameter ID="SpreadInitializationOverInterval" Selector="$Config/SpreadInitializationOverInterval$" ParameterType="int"/>

    <OverrideableParameter ID="Debug" Selector="$Config/Debug$" ParameterType="bool"/>

  </OverrideableParameters>

  <MonitorImplementation>

    <MemberModules>

      <DataSource ID="ScriptDS" TypeID="SystemCenterCentral.Utilities.Certificates.ScriptDataSource">

        <CertStoreID>$Config/CertStoreID$</CertStoreID>

        <StoreProvider>$Config/StoreProvider$</StoreProvider>

        <StoreType>$Config/StoreType$</StoreType>

        <RevocationFlag>$Config/RevocationFlag$</RevocationFlag>

        <RevocationMode>$Config/RevocationMode$</RevocationMode>

        <VerificationFlags>$Config/VerificationFlags$</VerificationFlags>

        <SubjectIncludeRegEx>$Config/SubjectIncludeRegEx$</SubjectIncludeRegEx>

        <IssuerIncludeRegEx>$Config/IssuerIncludeRegEx$</IssuerIncludeRegEx>

        <SubjectExcludeRegEx>$Config/SubjectExcludeRegEx$</SubjectExcludeRegEx>

        <IssuerExcludeRegEx>$Config/IssuerExcludeRegEx$</IssuerExcludeRegEx>

        <EnhKeyUseIncludeRegEx>$Config/EnhKeyUseIncludeRegEx$</EnhKeyUseIncludeRegEx>

        <EnhKeyUseExcludeRegEx>$Config/EnhKeyUseExcludeRegEx$</EnhKeyUseExcludeRegEx>

        <TemplateIncludeRegEx>$Config/TemplateIncludeRegEx$</TemplateIncludeRegEx>

        <TemplateExcludeRegEx>$Config/TemplateExcludeRegEx$</TemplateExcludeRegEx>

        <IgnoreSupersededCert>$Config/IgnoreSupersededCert$</IgnoreSupersededCert>

        <ExpiryThresholdDays>31</ExpiryThresholdDays>

        <Debug>$Config/Debug$</Debug>

        <IntervalSeconds>$Config/IntervalSeconds$</IntervalSeconds>

        <SyncTime>$Config/SyncTime$</SyncTime>

        <SpreadInitializationOverInterval>$Config/SpreadInitializationOverInterval$</SpreadInitializationOverInterval>

        <TimeoutSeconds>$Config/TimeoutSeconds$</TimeoutSeconds>

      </DataSource>

      <!--

            <ProbeAction ID="ScriptOnDemandProbe" TypeID="SystemCenterCentral.Utilities.Certificates.ScriptOnDemandProbe">

              <TimeoutSeconds>$Config/TimeoutSeconds$</TimeoutSeconds>

              <CertStoreID>$Config/CertStoreID$</CertStoreID>

              <Debug>$Config/Debug$</Debug>

            </ProbeAction>

            -->

      <ConditionDetection ID="CertValid" TypeID="System!System.ExpressionFilter">

        <Expression>

          <And>

            <Expression>

              <Or>

                <Expression>

                  <And>

                    <Expression>

                      <SimpleExpression>

                        <ValueExpression>

                          <XPathQuery Type="String">Property[@Name='CertStatus']</XPathQuery>

                        </ValueExpression>

                        <Operator>Equal</Operator>

                        <ValueExpression>

                          <Value Type="String">IsVerified</Value>

                        </ValueExpression>

                      </SimpleExpression>

                    </Expression>

                    <Expression>

                      <SimpleExpression>

                        <ValueExpression>

                          <Value Type="Boolean">$Config/IgnoreUntrustedRoot$</Value>

                        </ValueExpression>

                        <Operator>Equal</Operator>

                        <ValueExpression>

                          <Value Type="Boolean">false</Value>

                        </ValueExpression>

                      </SimpleExpression>

                    </Expression>

                  </And>

                </Expression>

                <Expression>

                  <And>

                    <Expression>

                      <SimpleExpression>

                        <ValueExpression>

                          <XPathQuery Type="String">Property[@Name='CertStatusIgnoreUntrustedRoot']</XPathQuery>

                        </ValueExpression>

                        <Operator>Equal</Operator>

                        <ValueExpression>

                          <Value Type="String">IsVerified</Value>

                        </ValueExpression>

                      </SimpleExpression>

                    </Expression>

                    <Expression>

                      <SimpleExpression>

                        <ValueExpression>

                          <Value Type="Boolean">$Config/IgnoreUntrustedRoot$</Value>

                        </ValueExpression>

                        <Operator>Equal</Operator>

                        <ValueExpression>

                          <Value Type="Boolean">true</Value>

                        </ValueExpression>

                      </SimpleExpression>

                    </Expression>

                  </And>

                </Expression>

                <Expression>

                  <RegExExpression>

                    <ValueExpression>

                      <XPathQuery Type="String">Property[@Name='CertStatus']</XPathQuery>

                    </ValueExpression>

                    <Operator>MatchesRegularExpression</Operator>

                    <Pattern>^This CA certificate has been superseded by a more current one</Pattern>

                  </RegExExpression>

                </Expression>

              </Or>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="String">Property[@Name='CertStatus']</XPathQuery>

                </ValueExpression>

                <Operator>NotEqual</Operator>

                <ValueExpression>

                  <Value Type="String"/>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </ConditionDetection>

      <ConditionDetection ID="CertNotValid" TypeID="System!System.ExpressionFilter">

        <Expression>

          <And>

            <Expression>

              <Or>

                <Expression>

                  <And>

                    <Expression>

                      <SimpleExpression>

                        <ValueExpression>

                          <XPathQuery Type="String">Property[@Name='CertStatus']</XPathQuery>

                        </ValueExpression>

                        <Operator>NotEqual</Operator>

                        <ValueExpression>

                          <Value Type="String">IsVerified</Value>

                        </ValueExpression>

                      </SimpleExpression>

                    </Expression>

                    <Expression>

                      <SimpleExpression>

                        <ValueExpression>

                          <Value Type="Boolean">$Config/IgnoreUntrustedRoot$</Value>

                        </ValueExpression>

                        <Operator>Equal</Operator>

                        <ValueExpression>

                          <Value Type="Boolean">false</Value>

                        </ValueExpression>

                      </SimpleExpression>

                    </Expression>

                  </And>

                </Expression>

                <Expression>

                  <And>

                    <Expression>

                      <SimpleExpression>

                        <ValueExpression>

                          <XPathQuery Type="String">Property[@Name='CertStatusIgnoreUntrustedRoot']</XPathQuery>

                        </ValueExpression>

                        <Operator>NotEqual</Operator>

                        <ValueExpression>

                          <Value Type="String">IsVerified</Value>

                        </ValueExpression>

                      </SimpleExpression>

                    </Expression>

                    <Expression>

                      <SimpleExpression>

                        <ValueExpression>

                          <Value Type="Boolean">$Config/IgnoreUntrustedRoot$</Value>

                        </ValueExpression>

                        <Operator>Equal</Operator>

                        <ValueExpression>

                          <Value Type="Boolean">true</Value>

                        </ValueExpression>

                      </SimpleExpression>

                    </Expression>

                  </And>

                </Expression>

              </Or>

            </Expression>

            <Expression>

              <RegExExpression>

                <ValueExpression>

                  <XPathQuery Type="String">Property[@Name='CertStatus']</XPathQuery>

                </ValueExpression>

                <Operator>DoesNotMatchRegularExpression</Operator>

                <Pattern>^This CA certificate has been superseded by a more current one</Pattern>

              </RegExExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery Type="String">Property[@Name='CertStatus']</XPathQuery>

                </ValueExpression>

                <Operator>NotEqual</Operator>

                <ValueExpression>

                  <Value Type="String"/>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </ConditionDetection>

      <ConditionDetection ID="CorrectInstance" TypeID="System!System.ExpressionFilter">

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Property[@Name='CertThumbprint']</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">$Config/CertThumbprint$</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </ConditionDetection>

      <ConditionDetection ID="CertificateInstance" TypeID="System!System.ExpressionFilter">

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">Property[@Name='InstanceType']</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">Certificate</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </ConditionDetection>

    </MemberModules>

    <RegularDetections>

      <RegularDetection MonitorTypeStateID="Good">

        <Node ID="CertValid">

          <Node ID="CorrectInstance">

            <Node ID="CertificateInstance">

              <Node ID="ScriptDS"/>

            </Node>

          </Node>

        </Node>

      </RegularDetection>

      <RegularDetection MonitorTypeStateID="Bad">

        <Node ID="CertNotValid">

          <Node ID="CorrectInstance">

            <Node ID="CertificateInstance">

              <Node ID="ScriptDS"/>

            </Node>

          </Node>

        </Node>

      </RegularDetection>

    </RegularDetections>

  </MonitorImplementation>

</UnitMonitorType>