Redfish Release 2024.3 Now Available

Posted on Tue, 09/17/2024 - 08:51

DMTF’s Redfish®, Release 2024.3 is now available for public download. Designed to deliver simple and secure management for hybrid IT and the Software Defined Data Center (SDDC), the latest release of the Redfish standard includes the addition of Time-based One-Time Password secret key handling and 18 schema updates.

Key highlights of the Redfish 2024.3 release are the additions of Username and UserAuthenticationSource to Event, LogEntry, Message, and Resource for event auditing and generalized Time-based One-Time Password properties and actions to AccountService and ManagerAccount.  In addition, LocalAccountTypes and LocalOEMAccountTypes were added to RemoteRoleMapping in AccountService and ExternalAccountProvider.

These latest enhancements are driven by the growth of Redfish and interoperability feedback received from implementers. Some of the items in the new Redfish 2024.3 update include:

  • Redfish Specification v1.21.0
    • NEW – Time-based One-Time Password secret key handling
  • Redfish Specification v1.20.2 (errata release)
    • Added /redfish/v1/Registries URI
    • Minor clarifications to naming rules
    • Clarified responses for “Password change required” conditions to show an error payload
  • 2024.3 Redfish Schema Bundle – This .zip file contains the current versions of all Redfish schemas. The bundle includes 18 schema updates and developer resources.
    • NEW – Username and UserAuthenticationSource to Event, LogEntry, Message, and Resource for event auditing
    • NEW – GenerateSecretKey, ClearSecretKey, and VerifyTimeBasedOneTimePassword actions were added to ManagerAccount
      • Allows a user to generate a random secret key to produce RFC6238-defined tokens
      • The secret key is retained by the service for future token verification
    • NEW – TimeBasedOneTimePassword property was added to MultiFactorAuth in AccountService
      • Used to configure generic RFC6238-defined TOTP settings
    • NEW – LocalAccountTypes and LocalOEMAccountTypes added to RemoteRoleMapping in AccountServiceand ExternalAccountProvider
  • Redfish Message Registry Bundle 2024.3 – The Message Registry Bundle (DSP8011) contains all released Redfish message registries.
    • Added PropertyModified message to Base 1.19.0
    • Added GeneratedSecretKeyRequired message to Base 1.19.0
      • Message returned if a user tries to authenticate, but the user does not have a secret key for producing a TOTP
      • The user is allowed to invoke the GenerateSecretKey action, but cannot perform other operations
  • Redfish Release 2024.3 Overview – This presentation provides detailed descriptions of each revision in Redfish 2024.3.
  • Redfish Resource and Schema Guide – Updated for 2024.3 this human-readable guide to the Redfish Schema is designed to help educate users of Redfish. Application developers and DevOps personnel creating client-side software to communicate with a Redfish service, as well as other consumers of the standard, will benefit from the explanations in this resource.
  • Redfish Conformance Testing Tools - Open source tools for service developers to validate their conformance with the Redfish protocol, data model, and profiles. Tools include the Redfish Protocol Validator, Redfish Service Validator, Redfish Interop Validator.
  • Redfish Publications Repository - Public GitHub repository contains an official read-only copy of the Redfish schemas and standard message registries
    • Creates public, durable locations for referencing specific schema or registry items in issue reports, forum postings, or other online references
    • Allows developers to automatically synchronize with new Redfish releases using normal GitHub tools and processes
    • Repository will be updated as each Redfish release become public
  • Redfish Data Model Specification – Includes normative statements (“LongDescription”) and informative description details from schema in a single document. Intended for both Redfish Service and client-side developers.
  • Redfish Property Guide – Intended primarily for schema authors, this newly revised reference helps with locating existing property definitions within the Redfish schema.
  • Redfish Release History – Updated with each new release, this presentation offers a comprehensive view of each revision to Redfish since 2016.

DMTF’s Redfish Forum would like to invite anyone interested in learning about the Redfish 2024.3 release to join a live webinar, hosted via Zoom, on Thursday, October 3, 2024, at 9:00 a.m. PT. The Forum chairs will present the contents of the release followed by a round table discussion. For questions regarding the webinar, email: webinars@dmtf.org. Don’t delay, be sure to register today!

To learn more about Redfish, click here. The Redfish Developer Hub is a one-stop, in-depth technical resource and provides all the files, tools, community support, tutorials and other advanced education you may need to help you use Redfish. Technical work on the Redfish standard takes place in DMTF’s Redfish Forum. To find out how you can join and contribute to this standard, click here. To submit input via the DMTF Technology Submission and Feedback Portal click here.