Release Note Details v25.4

The following table includes a complete list of the features (large enhancements), product backlog items (small enhancements or segments of a larger feature), and bug fixes included in release v25.4.

Table 84: Items for Release v25.4

ID Product Area Type Description
74261 ACME Product Backlog Item ACME Account List API updates
74262 ACME Product Backlog Item ACME Account list cli updates
74285 ACME Product Backlog Item Update enrollment template for ACME accounts via API
74287 ACME Product Backlog Item Update enrollment template for ACME accounts via CLI
74407 ACME Product Backlog Item Replace current JsonWebKey serializer with Microsoft's serializer for ACME Accounts
72333 ACME Feature ACME Account Enrollment Templates can be Updated via the API/CLI
74266 ACME Feature Cleanup ACME Account JWK Database content
71739 ACME Bug ACME Configure Script failing silently when not able to reach the SQL Server
71762 ACME Bug ACME Installs with AD Auth Against Command but Fails Certificate Enroll with Object Reference Error
76013 ACME Bug ACME Configuration Cannot use Templated Connection Strings
78490 ACME Bug ACME Container Metadata powershell scripts not working
62587 Alerts Product Backlog Item Refactor SSL System Notifications to not use EF
75987 Alerts Bug Substitutable text not working in alerts
76778 Alerts Bug Expiration Alert Page Title is Confusing
73701 API Product Backlog Item Database updates for CA Template cache changes
73702 API Product Backlog Item Add CA Template cache timer service job
73703 API Product Backlog Item Enrollment use CA template cache timer service job results
74210 API Product Backlog Item Deprecated Endpoints Only Break for API Users
74297 API Product Backlog Item GET /Certificates/QueryParsers returns associated query parsers
74408 API Product Backlog Item Deprecate SecurityRolePermissions Endpoints
74722 API Product Backlog Item GET KeyfactorAPI Template Management Endpoint
71502 API Feature Restructure CA Template Cache Management
74209 API Feature Deprecated Keyfactor API endpoints only break from API client origins
75678 API Bug Display CA Hostname setting causes changed API behavior
76554 API Bug /Enrollment/Deploy throws unhelpful error if key retention is set to none
73689 Application Settings Product Backlog Item SMTP OAuth/OIDC Authentication - Rework the SMTP client to support authenticating with OAuth Client Credentials.
73690 Application Settings Product Backlog Item SMTP OAuth/OIDC Authentication - Command Portal
73693 Application Settings Product Backlog Item SMTP OAuth/OIDC Authentication - Config GUI Wizard
73694 Application Settings Product Backlog Item SMTP OAuth/OIDC Authentication - Config Console Wizard
74455 Application Settings Product Backlog Item SMTP - API, SMTP CRUD updates
74864 Application Settings Product Backlog Item ConfigWizard - Service Offset Seed
74865 Application Settings Product Backlog Item dbupgradeTool - Service Offset Seed
75029 Application Settings Product Backlog Item SMTP Authentication Modernization - Feature Signoff Feedback
75437 Application Settings Product Backlog Item Allow for Headers to be added to token fetching
75659 Application Settings Product Backlog Item SMTP - add additional v2 Test Endpoint that supports PAM
75711 Application Settings Product Backlog Item SMTP - OAuth Authentication - Add RequestHeaders to the SMTP Configuration webpage
75746 Application Settings Product Backlog Item Apply OAuth Headers when retrieving Bearer Token
76444 Application Settings Product Backlog Item SMTP - configuration error message tweaks
64103 Application Settings Feature SMTP Modern Authentication
67941 Application Settings Feature Pseudo-Random, Automatically Applied Offset for Scheduled Tasks in Command
75656 Application Settings Feature SMTP - Add additional v2 Test Endpoint that supports PAM
64699 Application Settings Bug SMTP - Relay Authentication Error not being cleared when values are entered for Username and Password
70865 Audit Product Backlog Item SMTP changes should be in the audit log
72303 Audit Product Backlog Item Audit Logs Mentioning CertStoreCotainers should instead use Applications
64828 Audit Feature SMTP changes should be in the audit log
74748 Build Product Backlog Item Command 25.4 package updates
74749 Build Product Backlog Item Remote CA Connectors 25.4 package updates
74750 Build Product Backlog Item AnyGateway REST 25.4 package updates
74751 Build Product Backlog Item ACME 25.4 package updates
78302 Build Product Backlog Item ACME 25.4 pre-signing packages
78303 Build Product Backlog Item AnyCA REST 25.4 pre-signing packages
74747 Build Feature 25.4 Package Updates
78301 Build Feature 25.4 pre-signing package updates
74162 CA Gateway - HTTPS AnyGateway Product Backlog Item REST Gateway Correlation Token
74834 CA Gateway - HTTPS AnyGateway Product Backlog Item Additional RBAC role for AnyGateway REST
75967 CA Gateway - HTTPS AnyGateway Product Backlog Item Anygateway: Refresh Grid UI
76609 CA Gateway - HTTPS AnyGateway Product Backlog Item Update Anygateway REST React-CommonComponents
75970 CA Gateway - HTTPS AnyGateway Feature UI Styling Changes for AnygatewayREST
74207 CA Gateway - HTTPS AnyGateway Bug Visual Element next to Enabled toggle on Identity Provider edit panel
74349 CA Gateway - HTTPS AnyGateway Bug AnyCA REST Gateway gives Disable Bearer Token Error every minute
72784 CA Gateway - Other Feature Additional RBAC role for AnyGateway REST
73638 Certificate Authorities Product Backlog Item Implement new View Template Details endpoint in MS Client
73973 Certificate Authorities Product Backlog Item Add correlation id to CA Connector API project
74473 Certificate Authorities Product Backlog Item Modify Certificate Authorities to use breadcrumb UI elements
75676 Certificate Authorities Bug Display CA Hostname setting hides the host url field
76458 Certificate Authorities Bug Threshold monitoring error has reappeared: Greater Than threshold cannot be smaller than Less Than threshold
78489 Certificate Authorities Bug Update Command's list of default certificate profiles
73618 Certificate Details Product Backlog Item Add additional EKUs to command
73678 Certificate Details Product Backlog Item Create Certificate Validation API Endpoints
73977 Certificate Details Product Backlog Item Move validation functionality to status tab
73978 Certificate Details Product Backlog Item Validation tab rework
74356 Certificate Details Product Backlog Item Display Basic Constraints in Certificate Details tab
74742 Certificate Details Product Backlog Item Rework Create Validation Rules Endpoint
74756 Certificate Details Product Backlog Item Risk Validation UI Tweaks
64994 Certificate Details Feature Rework Certificate Details Validation
65840 Certificate Details Feature Validation Tab Redesign
65841 Certificate Details Feature Validator API Endpoints
72058 Certificate Details Feature Basic Constraints Reworked to Certificate Details Content
73500 Certificate Details Feature Review built-in EKUs
76419 Certificate Details Bug Certificate Change Owner - Invalid Role Shows Green Checkmark Despite Validation Error
73416 Certificate Enrollment Product Backlog Item PFX and CSR enrollment assign default owner role if none supplied
74467 Certificate Enrollment Product Backlog Item Update OwnerRole field with Default Owner Role option
73063 Certificate Enrollment Feature API Enrollment CSR/PFX assigns default owner if none is given
76000 Certificate Enrollment Feature Request SANs Enrollment Workflow Token Parser
67281 Certificate Enrollment Bug Chain Building Error in PFX Enrollment Inaccurate
67729 Certificate Enrollment Bug Integer Metadata Field Displays System Default Value instead of Enrollment Pattern Default Value (UI Issue)
69346 Certificate Enrollment Bug Container POST/Enrollment/CSR - Send request with CA but missing both Enrollment Pattern & Template get wrong message
70748 Certificate Enrollment Bug Spacing in the top of Enrollment Pages is double the size it should be
71810 Certificate Enrollment Bug CSR Enrollment When No Enrollment Pattern Is Enabled
76497 Certificate Enrollment Bug Enrollment using a MS template that requires approval fails when SMTP configuration is invalid
76520 Certificate Enrollment Bug Unhelpful Enrollment Error with Invalid OID in Certificate Extension or Certificate Policy
74930 Certificate Metadata Bug Opening Certificate Metadata Dialog causes Enrollment Handling to switch to an integer
74273 Certificate Operations Product Backlog Item Rework Validation API endpoint
74276 Certificate Operations Product Backlog Item Risk Intelligence Licensing and UI permissions
71275 Certificate Search Product Backlog Item Add Not Equal SAN Query Parser
72288 Certificate Search Product Backlog Item Rename Containers Query Parser to Applications
73298 Certificate Search Product Backlog Item Certificate lifespan query parser
73585 Certificate Search Product Backlog Item Lifespan querying feedback
73698 Certificate Search Product Backlog Item Add Does Not Contain SAN Query Parser
74254 Certificate Search Product Backlog Item Rule Query Parser for Certificate Collections
74255 Certificate Search Product Backlog Item Violation Query Parser for Certificate Collections
74609 Certificate Search Product Backlog Item Severity Query Parser for Certificate Collections
74683 Certificate Search Product Backlog Item Certificate Owner Column in Certificate Search Grid
74693 Certificate Search Product Backlog Item Risk Score Query Parser for Certificate Collections
75451 Certificate Search Product Backlog Item Add Risk Validation query parser grouping
35922 Certificate Search Feature Add Does not Contain and Not Equal to the SAN query parser
65843 Certificate Search Feature Rule Query Parser for Certificate Collections
66926 Certificate Search Feature Certificate Lifespan Search Query
72049 Certificate Search Feature Violation Query Parser for Certificate Collections
72050 Certificate Search Feature Risk Score Query Parser for Certificate Collections
72052 Certificate Search Feature Severity Query Parser for Certificate Collections
74450 Certificate Search Feature Certificate Owner Column in Certificate Search Grid
64916 Certificate Search Bug Invalid Date Validation: 6-Digit Year Automatically Converts to 275760 and Bypasses Error Message
72089 Certificate Stores Product Backlog Item Rename Containers to Applications in Cert Store Page
73704 Certificate Stores Product Backlog Item UI - Select From List of Any Applications on Cert Stores ADD/Edit Dialog
73705 Certificate Stores Product Backlog Item Upgrade Plan - Remove Container From Workflow Key
73706 Certificate Stores Product Backlog Item Workflow UI - Remove the Container Option in Workflow Add/Edit Page
73923 Certificate Stores Product Backlog Item API - PUT/POST CertificateStores Allow CertStores to Have Any Type of Container
73979 Certificate Stores Product Backlog Item API - Remove CertificateStoreType from Container
74007 Certificate Stores Product Backlog Item UI - Remove CertStoreType from Containers Grid and Add/Edit Dialog
66424 Certificate Stores Feature Containers/Applications can have multiple certificate store types
74894 Certificate Stores Bug Grid on Applications tab has multi-select support but no multi-select operations
75542 Certificate Stores Bug PUT /Applications - Status Code Returns 500 when Sending a Request with a Blank Application Name
75543 Certificate Stores Bug POST /Applications - Warning message should mention Application instead of Container.
76643 Certificate Stores Bug Remove From Certificate Store - Changing MC Entry Parameter Value On Modal Throws React Error
73640 Certificate Templates Product Backlog Item PUT/POST Keyfactor API Endpoints to support template management
73641 Certificate Templates Product Backlog Item Create Profile UI added to Command
73642 Certificate Templates Product Backlog Item Appsetting to toggle Profile Management
73644 Certificate Templates Product Backlog Item Update EJBCA template names by combining Profile Names
73765 Certificate Templates Product Backlog Item Profile Copy UI in Command
74126 Certificate Templates Product Backlog Item Track which templates are manageable by Command
74405 Certificate Templates Product Backlog Item Handle Unknown CAs by leaving them intact
74476 Certificate Templates Product Backlog Item Modify Certificate Templates to use breadcrumb UI elements
74692 Certificate Templates Product Backlog Item Keyfactor API Endpoints to support Custom Extension management
74694 Certificate Templates Product Backlog Item UI for managing Custom Extensions
74836 Certificate Templates Product Backlog Item Add Template Management Page and Buttons
75534 Certificate Templates Product Backlog Item Edit Profile UI added to Command
75541 Certificate Templates Product Backlog Item Add GET /Templates/CustomExtensions?configTenant endpoint
75619 Certificate Templates Product Backlog Item View Profile UI added to Command
75620 Certificate Templates Product Backlog Item Add Certificate Policies Dialog to the Create/Edit on CA UI
75621 Certificate Templates Product Backlog Item Add Certificate Extensions Multiselect to the Create/Edit on CA UI
75635 Certificate Templates Product Backlog Item Add Error for Profiles with a fixed date Validity
75669 Certificate Templates Product Backlog Item UI for Viewing Extensions
75671 Certificate Templates Product Backlog Item New EKU GET API Endpoint added to Keyfactor API
75672 Certificate Templates Product Backlog Item EKUs added to the Create/Edit on CA UI
75743 Certificate Templates Product Backlog Item Template Details View/Edit buttons are tied to Read-Only or Read/Write
75903 Certificate Templates Product Backlog Item Edited GetTemplateDetails to return Unknown Key Algorithms
75913 Certificate Templates Product Backlog Item Add ML-DSA and SLH-DSA Algorithms to Template Management UI
75927 Certificate Templates Product Backlog Item Add 6 DNS SANs via SetTemplateDetails
76405 Certificate Templates Product Backlog Item Custom extensions UI Required and Critical value columns
52336 Certificate Templates Feature Create Profiles in EJBCA from Command
72203 Certificate Templates Bug Templates - When value is entered for empty fields the red outline is not removed in the Certificate Cleanup Section
73735 Certificate Templates Bug EKUs not imported from ejbca
75725 Certificate Templates Bug Address Invalid SetTemplateDetails Test Cases
76020 Certificate Templates Bug Custom certificate extensions should have DEROBJECT property
76117 Certificate Templates Bug Importing templates after creating EJBCA profile in command can add invalid EKU values to database
76407 Certificate Templates Bug Default Certificate Profiles incorrectly logged as missing
76413 Certificate Templates Bug Spaces in Configuration Tenant Throws An Error
73687 Containers Product Backlog Item Rename Containers to Applications in API
76511 Containers Product Backlog Item UO Buildkit Targets
78184 Containers Product Backlog Item Merge helm jobs for pre-upgrade and pre-install
71936 Containers Feature Certificate Store Containers are Renamed Applications
76509 Containers Feature Consolidate UO Container Builds into one Dockerfile using Buildkit
76205 Containers Bug Container DB upgrade tool silently failing
70305 Dashboard Product Backlog Item Certs Issued Per Week Line Plot Widget
70306 Dashboard Product Backlog Item Certs Revoked Per Week Line Plot Widget
72606 Dashboard Product Backlog Item Add Built-In Description for Certs Issued and Revoked Per Week
74163 Dashboard Product Backlog Item Custom Query Count with QueryBuilder Input
74165 Dashboard Product Backlog Item Scrollable doughnut widget legend
74167 Dashboard Product Backlog Item Allow the Dashboard V2 to use collections that contain special tokens in their queries
74204 Dashboard Product Backlog Item Red info icon to alert deletion/changed permissions on widget entity
74754 Dashboard Product Backlog Item Display red info icon on widget to alert entity/permissions loss
75066 Dashboard Product Backlog Item Dashboard widgets with collections inputs resolve the collection names prior to opening the edit dialog for the widget
75502 Dashboard Product Backlog Item Upgrade script to remove default titles, descriptions, and critical threshold values for dashboard widgets
75503 Dashboard Product Backlog Item Dashboard UI hydrates widgets retrieved from user profiles with missing information from the list of predefined widgets
75529 Dashboard Product Backlog Item Allow Issuance/Revocation Widgets on new dashboard to use collections with special tokens
75908 Dashboard Product Backlog Item Remove GET /Analytics/Certificates/Count/WeakKeys Endpoint
75914 Dashboard Product Backlog Item Create GET Analytics/Certificates/Count/Grouped
75969 Dashboard Product Backlog Item API Responses Return a Single Object
76008 Dashboard Product Backlog Item Make Logi Optional - MSI
76459 Dashboard Product Backlog Item Make Logi Optional - Helm
70295 Dashboard Feature Custom Count Tiles based on Certificate Collection and Query
72317 Dashboard Feature Indicate previously configured Widget entities are now unavailable during edit
72804 Dashboard Feature Certificate Revocation/Issuance Line Plot Widgets
72929 Dashboard Feature Doughnut Chart has scrollable legend
74166 Dashboard Feature Allow the Dashboard V2 to use collections that contain special tokens in their queries
75064 Dashboard Feature Dashboard Widget Upgrade-ability
75906 Dashboard Feature Certificates With Weak Keys Widget Rework
74611 Dashboard Bug Dashboard does not reflect naming updates to ssl networks
74684 Dashboard Bug Dashboard widgets display No data for invalid collections when they should be in an error state
74862 Dashboard Bug Certificates With Weak Keys description should not indicate that renewed certificates are excluded
74863 Dashboard Bug Dashboard - Certificates With Weak Keys - The query string of the link is incorrect
76162 Dashboard Bug Missing Entity Icon Not Visible in Edit Widget Dialogue
76668 Dashboard Bug Metadata Collections not working in Dashboard
73582 Data Layer Product Backlog Item Add logging for SQL trips
73983 Data Layer Product Backlog Item Remove EFModels from SecretService
72766 Data Layer Feature Use Whitelists for Query Parser SortFields
74765 Data Layer Bug SQL Execution Time logging is inaccurate
73572 EJBCA Integration Product Backlog Item POC for View Template Details method
73677 EJBCA Integration Product Backlog Item POC for new SetTemplateDetails ICertificateAuthorityClient method
73695 EJBCA Integration Product Backlog Item Update rules for splitting EJBCA Template names during enrollment
74695 EJBCA Integration Product Backlog Item Add new ICertificateAuthorityClient method for Adding Custom Extensions
74696 EJBCA Integration Product Backlog Item Add new ICertificateAuthorityClient method for Editing Custom Extensions
74697 EJBCA Integration Product Backlog Item Add new ICertificateAuthorityClient method for Viewing Custom Extensions
75805 EJBCA Integration Product Backlog Item Add RA specific check to EJBCA Client
76561 EJBCA Integration Product Backlog Item Limit profile management to only EJBCA default EKUs
75670 EJBCA Integration Bug Default CA not handled in SetTemplateDetails
76115 EJBCA Integration Bug GetTemplateDetails returns duplicate EKUs
76121 EJBCA Integration Bug Secure Email EKU issue with GetTemplateDetails
76394 EJBCA Integration Bug POST /Templates/CADetails/{id} CA issues
76416 EJBCA Integration Bug Typo in POST /Template/CADetails when copied from GET
73570 Enrollment Patterns Product Backlog Item Show enrollment pattern Id in UI
74474 Enrollment Patterns Product Backlog Item Modify Enrollment Patterns to use breadcrumb UI elements
72405 Enrollment Patterns Feature Show Enrollment Pattern ID in UI
71159 Enrollment Patterns Bug Enrollment Patterns - The Template field displays blank when copying an Enrollment Pattern
71735 Enrollment Patterns Bug GET /EnrollmentPatterns/{id}/Metadata should return 400 or 404 when send request with non-existing Id
71911 Enrollment Patterns Bug Error 500 when trying to delete a role associated with an Enrollment Pattern
74341 Identity Providers Product Backlog Item Modify Identity Providers to use breadcrumb UI elements
73285 Installation Product Backlog Item Create KF Admin Infrastructure
74201 Installation Product Backlog Item Remove EF from LicenseModel and Wizard
74202 Installation Product Backlog Item Remove EF from ServiceModel and InstallerContextModel
74249 Installation Product Backlog Item Remove EFModels from SMTPModel
75547 Installation Product Backlog Item Update database upgrades to use new SchemaVersion
75548 Installation Product Backlog Item All Command apps check database version on startup
75550 Installation Product Backlog Item New check verb for database upgrade tool
75551 Installation Product Backlog Item helm upgrade checks for database needing upgraded
75065 Installation Feature Command - Only update database version when there are actual schema changes
73629 Licensing Product Backlog Item Disabled/Unpublished Workflow Certificates Excluded from Expiration Actioned Certificate Counts
75756 Licensing Product Backlog Item SSL Monitored is removed from Actioned Certificates
66853 Licensing Feature Exclude certificates from the Expiration actioned certificate counts if the workflow won't run
75752 Licensing Feature Remove SSL Monitoring from Actioned Certificates Count
74744 Logging Product Backlog Item AnyGateway EJBCA Correlation Token
71755 Logging Feature Add a correlation token for AnyCAGateway
72464 Logging Feature SQL Performance Logging
76164 Logging Bug UserProfilesDataStore logs claim they are coming from the EnrollmentPatternDataStore
73230 Management Portal Product Backlog Item Add the DocPage Link for the Help Icon on Excluded Certs Page.
75660 Management Portal Product Backlog Item Refactor the nav bar to be a sidebar
75715 Management Portal Product Backlog Item Refresh Grid UI
76608 Management Portal Product Backlog Item Grid performance optimization
72571 Management Portal Feature Add the Doc Page Link for the Help Icon on Excluded Certs Page.
74469 Management Portal Feature Use breadcrumb functionality in various Command pages
74949 Management Portal Feature UI Styling Changes for 25.4
76128 Management Portal Bug Ensure grids in Command do not claim to support sorting on columns not supported by the API (25.4)
74091 Orchestrator API Feature Modify Client Cert Authorization - flow to /Session/Register
74208 Orchestrator API Bug Command Orchestrator API returns ECDSA instead of ECC now
74288 Orchestrator API Bug /Session/Register no longer accepts GUID capabilities
74839 Orchestrators Product Backlog Item Modify Client Cert Authorization - flow to /Session/Register
72484 PAM Product Backlog Item Local PAM Open Command Secret Provider - Breadcrumb UI Elements
74313 Reporting Product Backlog Item Legacy Reports Pages in Command explicitly use the v1 Reports endpoints
75130 Reporting Product Backlog Item Update Dashboard and Report description to state PQC are not supported in Logi reports
75129 Reporting Feature Update Dashboard and Report description to state PQC are not supported in Logi reports
75986 Reporting Feature Logi should be an optional component
73384 Reporting Bug Error Drilling into Certificate Issuance Trends with Metadata
73945 Reporting Bug Drilldown for Report Certificate Count Grouped by Single Metadata Field broken for Date fields
77259 SCEP Product Backlog Item Support Base64Url encoding on SCEP requests
72287 Security Product Backlog Item Rename Containers to Applications in Security Roles and Claims Page
73621 Security Product Backlog Item Address Vulnerabilities in Logi
73623 Security Product Backlog Item Remove docker-compose File
73625 Security Product Backlog Item Call Dispose on AWS Classes That Implement IDisposable
73626 Security Product Backlog Item Address Improper Resource Shutdown or Release Issues
73627 Security Product Backlog Item Update Vulnerable Packages
73628 Security Product Backlog Item Address Potential CA Connector Singleton Issue
74311 Security Product Backlog Item Use Whitelists for Query Parser SortFields
74391 Security Product Backlog Item Modify Security Roles and Claims to use breadcrumb UI elements
74682 Security Product Backlog Item Claim ID Column in Claims Grid
75442 Security Product Backlog Item Change Claims Grid Column Sizes for Id and Description
72419 Security Feature Deprecate SecurityRolePermission Endpoints
73619 Security Feature Address Black Duck Issues - 25.4
74308 Security Feature Claim ID Column in Claims Grid
72869 Security Bug Long Dialog Titles cause close X button to move down
73248 Security Bug Edit Claim Dialog Header - Sizing Issue
76568 Security Bug Command Fails to Check Provider For Analogously Defined Security Role Claims
74866 Services Product Backlog Item TimerService - Use Seed to Generate Random Offset for Scheduled Task in Command
70848 Services Feature Installer EF Removal
78581 Services Bug Resource leak in multiple applications
71795 SSL Management Product Backlog Item SSL Discovery/Monitoring - SubmitBatch
71801 SSL Management Product Backlog Item SSL Timer Service - Schedule Jobs For Networks
71805 SSL Management Product Backlog Item SSL - Remove Network
72580 SSL Management Feature Refactor SSL out of EF
71799 SSL Scanning Product Backlog Item SSL - Immediate SSL Scan
73707 Workflow Product Backlog Item Workflow API - Remove Containers Option
74753 Workflow Product Backlog Item Update CA Configuration Parameter Input for EP Changes
76011 Workflow Product Backlog Item Request SANs Enrollment Workflow Token Parser
74758 Workflow Feature Allow Expiration Renewal Workflow step to CA Sprinkle
71821 Workflow Bug Workflow Definition - Email not being sent when recipient has invalid/valid email address separated by a comma/semicolon
72600 Workflow Bug Reusing Approval Link that has already been approved generates An unexpected error occurred
76445 Workflow Bug Workflow data getting removed when reverting to older version