There is another REST DA configuration providing variety of Authentication types, Registration and Import Metadata Policies, described below:

Authentication Type

Each property from the drop-down menu provides the following Authentication Type:

  • NO_AUTHENTICATION – Authentication is disabled. Credentials are not checked.

  • GENERIC_BASIC_AUTH – Do not generate user/pass for device. These node properties must be explicitly defined for corresponding subtree (or ROOT). Generic credentials are checked.

  • STRICT_BASIC_AUTH – Generate user/pass for every device and save it as node properties. Check provided user/pass for matching with the device node properties.

  • GENERIC_CERT_AUTH – Do not generate certificate for device. REST calls must be with valid/trusted certificate – the same for all devices).

  • STRICT_CERT_AUTH – Generate certificate for every device. REST calls must be with generated certificate for the device.

Registration Policy

The Registration Policy is configured by choosing one of the properties:

  • ALLOW_ANONYMOUS_IMPLICIT_REGISTRATION – Registration is allowed with every REST call, when device is not existing. Credentials are not checked.

  • ALLOW_IMPLICIT_REGISTRATION – Registration is allowed with every REST call, when device is not existing. Generic credentials must be provided.

  • ALLOW_ANONYMOUS_REGISTRATION – Registration is allowed only on POST /rspi/restdm/<deviceType>/<deviceId>. Credentials are not checked.

  • ALLOW_REGISTRATION – Registration is allowed only on POST /rspi/restdm/<deviceType>/<deviceId>. Generic credentials must be provided.

  • DO_NOT_ALLOW_REGISTRATION – Registration is not allowed.

Generic credentials

  • For the Basic Authentication, user and password from the node properties you have to provide for the corresponding subtree.

  • For the HTTPS Client Authentication valid/trusted certificate must be provided.

Import Metadata Policy

The policy for providing metadata is set by the properties of Authentication for CU metadata (MetatypeProvider XMLs) and icons:

  • ALLOW_ANONYMOUS_IMPORT – metadata could be provided without authentication.

  • DEVICE_BASIC_GENERIC_AUTH – Generic credentials must be provided. (device could not be registered).

  • DEVICE_BASIC_STRICT_AUTH – Check credentials for specific device – i.e. device must be registered.

  • DEVICE_CERT_GENERIC_AUTH – REST calls must be with valid/trusted certificate, which is the same for all devices.

  • DEVICE_CERT_STRICT_AUTH – REST calls must be with generated certificate for the device.

  • USER_BASIC_AUTH – basic authentication with valid RM user. The user must have Permission – REST DA - Metadata Import role.

  • GENERIC_DEVICE_OR_USER_BASIC_AUTH – both DEVICE_BASIC_GENERIC_AUTH or USER_BASIC_AUTH.