Release Note Details v12.3

The following table includes a complete list of the features (large enhancements), product backlog items (small enhancements or segments of a larger feature), and bug fixes included in release v12.3.

Table 105: Items for Release v12.3

ID Product Area Type Description
35290 Alerts Bug Download Link variable for the automated issued email - permissions issue
56853 Alerts Bug OCSP Revocation Monitoring Alert Save Error
57022 Alerts Bug Revocation Monitoring Config Dialog Has Scroll Bar
57255 Alerts Bug Revocation Monitoring Test endpoint not evaluating Stale status correctly for CRL endpoints
57425 Alerts Bug OCSP Monitoring Request Missing Content-Type Header
57928 Alerts Bug OCSP parameters left blank when doing a revocation monitoring test
58264 Alerts Bug Expiration and Key Rotation Alerts POST/PUT endpoints - Subject and Message properties not required when UseWorkflows is false
58317 Alerts Bug Alert Settings Prematurely Removes Errors
58322 Alerts Bug Revocation Monitoring Alert Test Produces Error on Valid CRLs and OCSPs
61329 Alerts Bug Key Rotation Alert - Code shows “UseHandler” value is false even though its enabled in the UI
56823 API Product Backlog Item Revoke Cert without publishing CRL
62137 API Product Backlog Item Move user migration endpoint
54778 API Feature Revoke Cert without publishing CRL
46992 API Bug GET /Templates/{id} 3072 and 6144 RSA KeySizes not Imported Properly
54898 API Bug AuthorityKeyId and SampleSerialNumber Results from POST Monitoring Resolve OCSP Incorrect?
59937 API Bug API error filter classname logged as “System.String”
60652 API Bug Null reference error in POST KeyfactorApi/Security/Roles v2
61137 API Bug Excessive reads of MetadataFieldTypes table on every API call
61246 API Bug POST /Certificates/Revoke Has Confusing RevokeAll Flag
55500 Application Settings Product Backlog Item Add Application Setting to disable CSR warning
56092 Application Settings Product Backlog Item Option to Increase Inventory Job History Limit
57164 Application Settings Product Backlog Item Add Application Setting for CSP Options
57901 Application Settings Product Backlog Item Certificate Download Filename Application Setting
58479 Application Settings Product Backlog Item Refactor Codebase to Use AppSettingService
58480 Application Settings Product Backlog Item Refactor Duplicate Functionality into IAppSettingService
58482 Application Settings Product Backlog Item Create IApplicationSettingDataStore
58483 Application Settings Product Backlog Item Remove ApplicationSettings from IEFModels
60914 Application Settings Product Backlog Item Rename Application Setting to “Allow Periods in Certificate Filenames”
61703 Application Settings Product Backlog Item Default Periods App Setting to True
55503 Application Settings Feature Add an Application Setting to disable CSR enrollment warning when an enrollment is performed using a CSR generated in Command
56075 Application Settings Feature Option to Increase Inventory Job History Limit
57983 Application Settings Feature Refactor App Settings out of EF
57037 Application Settings Bug AppSettings Int Type Field Value Able to Have 0 Saved with Positive Integer Validation
58594 Audit Product Backlog Item Revoke All in the Audit log comes across as multiple revokes
45554 Audit Feature Revoke All in the Audit log comes across as multiple revokes
55916 Audit Bug Unable to Open a 403 Audit Record
57041 Audit Bug Audit Log - Workflow Instance Dialog Header Sizing Issue
58314 Audit Bug Updating an IDP is listed as Created in Audit log
58397 Build Product Backlog Item Command 12.3 Package Updates
58526 Build Product Backlog Item UO Package Updates
58560 Build Product Backlog Item HostedSoftwareComponents Package Updates
54906 Build Feature Reconsider automatic roll-forward behavior
58375 Build Feature Command 12.3 Package Updates
52248 Certificate Authorities Product Backlog Item Last Enabled CA Connector Checks
56331 Certificate Authorities Product Backlog Item Remove Collapsible Section from Task Queue Connection Tab
57111 Certificate Authorities Product Backlog Item CA Sync user lookups
60243 Certificate Authorities Product Backlog Item Add OutdatedSyncCount to certificate requests
55163 Certificate Authorities Bug CA Update Fails When Value for Properties Not Supplied
55602 Certificate Authorities Bug Possible to Save KeyRetention Without KeyRetentionDays
56660 Certificate Authorities Bug Null reference when HTTPS auth cert missing
57259 Certificate Authorities Bug CA Panel prompting for unsaved changes after “Test Connection” when nothing is changed
58564 Certificate Authorities Bug EJBCA -User not prompted for password after selecting cert and choosing to cancel then reselecting another cert
59884 Certificate Authorities Bug Width of the Button in the CA Panel
58243 Certificate Collections Product Backlog Item Make collection items updates more efficient
57286 Certificate Collections Feature Update collection items updates
54577 Certificate Collections Bug Collection Permissions Do Not Accurately Display
57950 Certificate Collections Bug Renew Dialog Wrapping Close X
61701 Certificate Collections Bug favorite certificate collections not displayed when many collections exist
60962 Certificate Details Product Backlog Item Add CER and CRT Certificate Download Options
57001 Certificate Details Bug Certificate Details: Validation shows “Trusted Root: Pass” and “Chain Built: Pass” even if Command doesn't have the root
61704 Certificate Details Bug When “Include Chain” is Selected, CER and CRT Options Remain Enabled
56165 Certificate Enrollment Product Backlog Item Download Certificates with FQDN Formatted Name
56988 Certificate Enrollment Product Backlog Item Add certificate owner application settings, certificate property, and permissions
56992 Certificate Enrollment Product Backlog Item Add OwnerRoleName field parser and %ROLES% query token
56993 Certificate Enrollment Product Backlog Item PUT /Certificates/{id}/ChangeOwner
56995 Certificate Enrollment Product Backlog Item Add certificate owner fields for certificates
56999 Certificate Enrollment Product Backlog Item Setting certificate owner role during enrollment and renewal
57007 Certificate Enrollment Product Backlog Item Setting certificate owner role when certificates are introduced
57044 Certificate Enrollment Product Backlog Item Update Command and EJBCA Client
58396 Certificate Enrollment Product Backlog Item Update PUT /Certificates/{id}/ChangeOwner to check cert is in collection
61109 Certificate Enrollment Product Backlog Item Users can add multiple SANs during PFX enrollment
61279 Certificate Enrollment Product Backlog Item Users can add multiple SANs during CSR enrollment
61993 Certificate Enrollment Product Backlog Item Cleaup on SAN enrollment input
41214 Certificate Enrollment Feature Download Certificates with FQDN Formatted Name
42129 Certificate Enrollment Feature Adding Multiple FQDN During PFX Enrollment
55291 Certificate Enrollment Feature Certificate Owner Role
55512 Certificate Enrollment Feature Specify CSP option for PFX Enrollment and Download
57989 Certificate Enrollment Bug PFX Enrollment page breaks for AD templates that require approval
58416 Certificate Enrollment Bug Able to complete CSR enrollment without requiring the Subscriber Terms checkbox to be checked
58430 Certificate Enrollment Bug PFX Enrollment - Certificate metadata (invalid email-contact) error message when domain is missing
60699 Certificate Enrollment Bug Configure Renewal Option Not Setting Renew Flag
60838 Certificate Enrollment Bug Cannot Enroll via PFX or CSR with a Standalone CA
60839 Certificate Enrollment Bug PFX Enrollment Page is broken when trying to renew a cert via configure that was issued from a Standalone CA
60871 Certificate Enrollment Bug Unable to uncheck Standalone CA box on PFX Enrollment page
60926 Certificate Enrollment Bug Allow Enrollment with RSA 3072 when Minimum Key Size is 2048
61231 Certificate Enrollment Bug Pending certificate requests are not assigned certificate owner role
58368 Certificate Metadata Bug No Validation For Metadata Int Type Default Value
57166 Certificate Operations Product Backlog Item CSP Hint Dropdown option for PFX and download dialog UI
57173 Certificate Operations Product Backlog Item Update PFX Enrollment API to include CSP Hint
57174 Certificate Operations Product Backlog Item Update Certificate Details Download Dialog API to include CSP Hint
59988 Certificate Operations Product Backlog Item Update to Target CSP on the Cert Search Download Dialog and in the Application Settings
59989 Certificate Operations Product Backlog Item Update to Target CSP on the PFX Enrollment Page
60130 Certificate Operations Feature Download from Certificate Search Page in .cer or .crt Format
58477 Certificate Operations Bug Add to Certificate Store reporting no private key when there is a private key
58527 Certificate Operations Bug Renew Button is not Hidden from User without Renew Permissions
58398 Certificate Search Product Backlog Item Users can configure certificate owner from certificate details dialog
58641 Certificate Search Product Backlog Item Add operations and audit logs to track certificate ownership change
57048 Certificate Search Bug No error pops up when trying to add a cert w/ a private key to a store and user does not have read private key perms
61825 Certificate Search Bug The Requester field is empty for newly enrolled certificates
56841 Certificate Stores Bug Discovery not accepting “No Value” for store credentials
57167 Certificate Stores Bug POST + PUT CertificateStores/Server - Requests are still being validated by model attributes
57245 Certificate Templates Product Backlog Item Allow users to configure certificate owner role data for templates
56077 Certificate Templates Bug Edit Template page shows confusing system wide supported ECC Curves
56686 Certificate Templates Bug One-click renewal info on template doesn't match info tool tip on CA
57000 Certificate Templates Bug Regular Expression Validates Case-Sensitivity When It Shouldn't
58035 Certificate Templates Bug Template Enrollment RegEx Dialog Missing Case Info
58388 Certificate Templates Bug User prompted about unsaved changes after overriding metadata system-wide settings
59527 Certificate Templates Bug One click renewal toggle is broken on Templates
56703 Dashboard Product Backlog Item Logi does not Support Hybrid Authentication Deployments
58304 Dashboard Product Backlog Item Debug Embedded Reports application setting updated to include Dashboard
58462 Dashboard Product Backlog Item Add UserId column to Saved Dashboard table
55052 Dashboard Feature Logi does not Support Hybrid Authentication Deployments
60254 Dashboard Feature Update Debug Report App Setting to include Dashboard
57039 Dashboard Bug Remove Unnecessary Default Parameter for URL in Drilldowns Redirecting to Agents Page
58265 Dashboard Bug Dashboard - The collection name is not being shown in the collection graph when a collection is set to show on the dashboard but has 0 certificates
60395 Dashboard Bug Certs w/ Weak Encryption Collection not showing on Dashboard Collections Panel
60502 Dashboard Bug Debugger Links showing up for Non-Admin users on the dashboard
60624 Dashboard Bug Risk Header drilldowns include renewed certificates
62160 Data Layer Bug Null reference error in CertificateCollectionDataStore constructor
56755 Documentation Product Backlog Item Swagger does not Support Hybrid Authentication Deployments
58597 Documentation Product Backlog Item Add Comments to Support Stored Procedures
55093 Documentation Feature Swagger does not Support Hybrid Authentication Deployments
55206 Documentation Feature Add Comments to Support Stored Procedures
53761 Identity Providers Product Backlog Item Track users by idp
56702 Identity Providers Product Backlog Item Add UI changes for fetching IdP Endpoints to Management Portal
57393 Identity Providers Product Backlog Item IdentityProviders - API, IDP can be enabled/disabled login via the POST/PUT endpoint
57395 Identity Providers Product Backlog Item IdentityProviders - UI, IDP can be enabled/disabled login via the Edit endpoint
57396 Identity Providers Product Backlog Item IdentityProviders - Install Wizard, new IDPs are enabled by default
58569 Identity Providers Product Backlog Item Update UI changes for fetching IdP Endpoints to Management Portal
59481 Identity Providers Product Backlog Item Update IdP migration script to use the UserId column to in SavedDashboard table
60259 Identity Providers Product Backlog Item IdentityProviders - API, removed authentication enable flag from the POST
60267 Identity Providers Product Backlog Item IdentityProviders - ConfigurationWizard, prevent updating an existing IDP enable/disable auth flag when importing an XML file.
60268 Identity Providers Product Backlog Item IdentityProviders- Portal, update disable an IDP process to remove user's cookies.
53732 Identity Providers Feature Improve IdP Management Flexibility
53760 Identity Providers Feature Support for IdP Migration
55682 Identity Providers Feature Fetch IdP Endpoints using Discover Endpoint in Management Portal
55504 Identity Providers Bug A Blank IdP is Easily Added in Config Wizard
58528 Identity Providers Bug Command Token cache ignores additional parameters
57351 Installation Product Backlog Item Configure the _Settings.lgx file when Keyfactor Portal tab is updated
58034 Installation Feature Configure the _Settings.lgx file when Keyfactor Portal tab is updated
56577 Installation Bug Configuration Wizard Admin Users tab - Claim value validation is not reset when Claim Type is changed
56658 Installation Bug Unit not included in configuration wizard for multiple fields
56845 Installation Bug OAuth Invalid Config Wizard Warning on Site
57387 Installation Bug Configuration Wizard Settings Import Does Not Respect Provider Type Value
57972 Installation Bug Configuration Wizard - Administrative Users tab with invalid AD claim value
58548 Installation Bug Command Connection Strings not Updated by Default During Reconfiguration
55142 Logging Product Backlog Item Update logging in ExecuteDapperQueryOperation to include execution time
53325 Logging Feature Update logging in ExecuteDapperQueryOperation to include execution time
56826 Logging Bug IdentityProviderExtensions spams API log on “Warn” with 11.5 AD auth
58719 Logging Bug EJBCA External CA causing errors in logs during Template Import
60860 Logging Bug Full Connection String Put in Logs
56091 Management Portal Product Backlog Item Add “ellipse” option to grids to show more options.
56700 Management Portal Product Backlog Item Sign out button on error page
56701 Management Portal Product Backlog Item Displaying Auth error instead of directing user to log
58647 Management Portal Product Backlog Item Wrap Logout Button with Open-Please-Wait
58648 Management Portal Product Backlog Item Update Layout on Error Pages
47141 Management Portal Feature Add Sign Out Button to Error Pages
54957 Management Portal Feature Handle a second row of buttons in the grid
61295 Management Portal Bug Incorrect IDP Login Page upon Logout
61698 Management Portal Bug Command Crashes After Configuration
54054 Orchestrator API Product Backlog Item Performance logging in Orchestrator API logs
57064 Orchestrator API Product Backlog Item Orchestrators - Update the AgentAPI correlation token in the OrchestratorLogs to use the built-in .NET trace identifier
57066 Orchestrator API Product Backlog Item Orchestrators - Update the AgentsAPI to append the AgentId in the api logs with the correlation id logs
59991 Orchestrator API Product Backlog Item OrchestratorAPI - Remove the duration api request log toggle & update log level for the log message
51325 Orchestrator API Feature Associate Logs in Orchestrator API with Orchestrator
51331 Orchestrator API Feature Provide performance information in Orchestrator API logs
56860 Orchestrator API Bug Orchestrator Job Status - Sort by “Result” column raise error
34819 Orchestrator Management Bug Possible Bug - Issue un-scheduling store inventory jobs
57063 Orchestrators Product Backlog Item Orchestrators - Update the Orchestrators to append their unique IDs in their request headers
59770 Orchestrators Product Backlog Item Require .NET 8 on UO install
60504 Orchestrators Product Backlog Item Orchestrators - Update the UO to cache its id in appsetting
60798 Orchestrators Bug UO v12.3 is not installing with Keycloak/OAuth over Powershell 5
60289 PAM Product Backlog Item LocalDB PAM Provider
60542 PAM Product Backlog Item Local PAM Entries Query Endpoint
60543 PAM Product Backlog Item Local PAM Entries Create Endpoint
60544 PAM Product Backlog Item Local PAM Entries Update Endpoint
60545 PAM Product Backlog Item Local PAM Entries Delete Endpoint
45017 PAM Feature “Local” Secrets to be treated as PAM provider(s)
61733 Policy Modules Bug Upgrade from 10.0.x to 10.1 Policy Module loses registry settings
58440 Post Quantum Product Backlog Item Create PEM cryptographic object formatter
58441 Post Quantum Product Backlog Item Create PKCS12 cryptographic object formatter
58442 Post Quantum Product Backlog Item Create DER cryptographic object formatter
58443 Post Quantum Product Backlog Item Create JKS cryptographic object formatter
58447 Post Quantum Product Backlog Item Create CA certificate cache tests
58635 Post Quantum Product Backlog Item Update Command Schema and DAL to support Dilithium Keys and Hybrid Certificates
60120 Post Quantum Product Backlog Item Update certificate import to allow ingress of hybrid certs and certs with PQC keys
60122 Post Quantum Product Backlog Item Update deletion SQL script to handle multiple key pairs
60722 Post Quantum Product Backlog Item Create P7B cryptographic object formatter
52027 Remote CA Management Product Backlog Item Establish connection to message queue on startup
52370 Remote CA Management Product Backlog Item CA Connector needs configurable SignalR settings
53448 Remote CA Management Product Backlog Item Add “Remote CA Connector” App Settings
54037 Remote CA Management Product Backlog Item Add CA Connector appsetting for configurable CA config cache expiration
54222 Remote CA Management Product Backlog Item Add “Task Queue” App Settings
56286 Remote CA Management Product Backlog Item Refresh CA Connector Grid
57141 Remote CA Management Product Backlog Item CA Connector shuts down cleanly
57220 Remote CA Management Product Backlog Item Add collapsible section to better divide fields in CA Connector dialog
57922 Remote CA Management Product Backlog Item Test Connection status to CA Connector API in PowerShell install script
57923 Remote CA Management Product Backlog Item Test Connection status to CA Connector API in bash install script
57924 Remote CA Management Product Backlog Item Add Configurable Appsettings In “Task Queue”
57926 Remote CA Management Product Backlog Item Add support for testing connection in Remote CA Connector executable
58332 Remote CA Management Product Backlog Item Create a /status endpoint to the CA Connector API to enable testing connection from the remote ca client
42731 Remote CA Management Feature Remote CA Client Installations should test connection to server
52365 Remote CA Management Feature CA Connector needs configurable SignalR settings
53529 Remote CA Management Feature Add configurable appsettings for Remote CA job execution
53625 Remote CA Management Feature CA Connector Management Stage II
55170 Remote CA Management Feature CA Connector shuts down cleanly
56200 Remote CA Management Feature Establish Connection to Message Queue on Startup
56616 Remote CA Management Bug Multiple connected CA Connector with same name
43296 Reporting Product Backlog Item Certificate Count Grouped by Single Metadata Field Report Needs to Support Email Type Metadata Fields
57371 Reporting Product Backlog Item vdir parameter should not be passed from request
57373 Reporting Product Backlog Item Security-related values should not be request parameters
57376 Reporting Product Backlog Item Remove miscellaneous @Request tokens from Logi SQL scripts
57377 Reporting Product Backlog Item Dashboard CA_Info and CDPInfo parameters should not use custom serialization format
57378 Reporting Product Backlog Item Remove Keyfactor.Command.Http.Validation.Logi module from MSI installer
57964 Reporting Product Backlog Item Remove @Local tokens from Logi SQL scripts
57965 Reporting Product Backlog Item Remove @Session tokens from Logi SQL scripts
57968 Reporting Product Backlog Item Remove @Repeat tokens from Logi SQL scripts
57970 Reporting Product Backlog Item Remove @Function tokens from Logi SQL scripts
58502 Reporting Product Backlog Item Remove Request tokens involving dates from Logi SQL Scripts
58504 Reporting Product Backlog Item Remove Request Tokens Involving CA Ids from Logi SQL Scripts
58505 Reporting Product Backlog Item Remove Request Tokens Involving Offset from Logi SQL Scripts
58662 Reporting Product Backlog Item Replace all uses of SingleQuote tokens with STRING_SPLIT
59776 Reporting Product Backlog Item Expiration Report Enhancement
35924 Reporting Feature Expiration Report Enhancement
47491 Reporting Feature Certificate Count Grouped by Single Metadata Field Report Needs to Support Email Type Metadata Fields
57370 Reporting Feature Logi Security Enhancements
57250 Reporting Bug Make the “@Constant” Logi token consistent in its spelling
59448 Reporting Bug Expiration report's time period in days are incorrect
59521 Reporting Bug Certificate Count by Template Report newly revoked certificates missing from drilldown
61044 SCEP Bug SCEP enrollments fail with “Denied by Policy Module”
57003 Security Product Backlog Item Certificate owner role security roles and template changes
57110 Security Product Backlog Item User migration endpoint
57171 Security Product Backlog Item Allow users to configure security roles change owner permission and email address
57948 Security Product Backlog Item CSR Generation permission does not fall into the CSR Enrollment permission
59524 Security Product Backlog Item RevocationMonitoring - Installer, Add Schedule access control string permission upgrade script
59642 Security Product Backlog Item RevocationMonitoring - API, update the PUT endpoint to allow modifying only the schedule fields
59643 Security Product Backlog Item RevocationMonitoring - UI, update the Revocation monitoring edit dialog to only allow modifying the schedule fields
26568 Security Feature Allow a permission to set Revocation Monitoring Schedule
55769 Security Feature Display Auth Errors to Users Instead of Directing to Logs
57251 Security Feature Separating CSR Enrollment and CSR Generation in v11
56009 Security Bug Session timeout redirects user to default login instead of login they used to get into Command
60137 Security Bug CSRGeneration - Security Roles are not updated to include both the CSR Enroll & CSR Generation permissions for AD
60366 Security Bug Revocation Monitoring Permission updates - Setting Schedule to off throws an error
56850 SSH Bug SSH logons searchselect exclusion query doesn’t scale
57903 SSH Bug Bash Orchestrator hitting Command line limits with large number of SSH Keys during Sync.
58253 SSH Bug Stale Date Doesn't Populate on Generation of a New SSH Key
57953 SSL Management Product Backlog Item Rework AgentPoolEmptyAlertFactory
57008 SSL Management Feature SSL Query Efficiency Improvements
55470 SSL Management Bug SSL Discovery Does Not Show Default Agent Pool in Orchestrator Pools Definition
57257 SSL Management Bug SSL Discovery shows all SSL capable orchestrators not just approved orchestrators
57179 SSL Scanning Product Backlog Item Reduce the amount of Data Stored for SSL Scan Jobs
57422 SSL Scanning Product Backlog Item Network and ScanJobPart SQL Query Performance Updates
57006 SSL Scanning Feature Reduce the Amount of Data Stored for SSL Scan Jobs
58215 Uncategorized Product Backlog Item Create new Component for Grid Ellipses
56088 Workflow Product Backlog Item Add requester's role information on the workflow instance
56145 Workflow Product Backlog Item Workflow email alert sends emails to all addresses in a comma separated list
56163 Workflow Product Backlog Item Workflow step to update metadata on a certificate
57026 Workflow Product Backlog Item Certificate owner role settable in workflow
59711 Workflow Product Backlog Item Add workflow token parser to fetch certificate owner role email address
60169 Workflow Product Backlog Item PowerShell 5.1 Compatibility Mode (Workflows)
60536 Workflow Product Backlog Item PowerShell 5.1 Compatibility Mode (Legacy Alerts)
37871 Workflow Feature Passing Requester roles through workflow
54790 Workflow Feature Workflow Step to set Metadata Value
55551 Workflow Feature Workflow email alert sends emails to all addresses in a comma separated list
60167 Workflow Feature PowerShell 5.1 Compatibility Mode
56998 Workflow Bug Error in Delete Workflow Definition if Too Many Instances Exist
57267 Workflow Bug Blank Alert Dialog on Successful Revocation Workflow Approval
58366 Workflow Bug SANs and metadata values are not being displayed in workflow instances for CSR/PFX Enrollment
59694 Workflow Bug Error with Send Email workflow step with token recipient
59935 Workflow Bug Workflow step type search select sending query on every keystroke
60612 Workflow Bug Workflow stuck in running state on Error getting value from “Result” on “System.Threading.Tasks.Task`1[System.Object]”
61880 Workflow Bug Initiating User Roles token should be easier to work with in PowerShell
61908 Workflow Bug $(InitiatingUserName) token no longer valid
61951 Workflow Bug [WorkflowInstance-Restart] Title of the restarted workflow instance is missing requester name