Monthly Release 12.4 Notes

September 2024

For a complete list of the items included in this release, see Release Note Details v12.4.

Updates and Fixes

• Update: The Task Queue Connection tab on the Certificate Authorities page now requires System Settings > Read and System Settings > Modify permissions to use instead of Certificate Authority > Read and Certificate Authority > Modify permissions.

• Update: The Keyfactor CA A certificate authority (CA) is an entity that issues digital certificates. Within Keyfactor Command, a CA may be a Microsoft CA or a Keyfactor gateway to a cloud-based or remote CA. Policy Module now requires version 8.0 of the Microsoft .NET Desktop Runtime (x64).

  Note:  The Keyfactor CA Policy Module is versioned separately from Keyfactor Command as a whole. As of release 12.4 of Keyfactor Command, the current version of the Keyfactor CA Policy Module is release 10.1.
• Update: A tooltip has been added on the workflow A workflow is a series of steps necessary to complete a process. In Keyfactor Command, it refers to the workflow builder, which allows you to automate event-driven tasks such as when a certificate is requested, revoked or found in a certificate store. definition editing dialog to describe the Use PowerShell 5.1 toggle.
• Fix: Viewing and editing settings on the Certificate Authorities page in the Management Portal no longer requires Agents > Management > Read permissions.
• Fix: The Update Metadata workflow step type now functions correctly with the following workflow types: Enrollment Certificate enrollment refers to the process by which a user requests a digital certificate. The user must submit the request to a certificate authority (CA)., Revocation, Expiration, Certificate Entered Collection The certificate search function allows you to query the Keyfactor Command database for certificates from any available source based on any criteria of the certificates and save the results as a collection that will be availble in other places in the Management Portal (e.g. expiration alerts and certain reports)., Certificate Left Collection, Certificate Entered Store, Certificate Left Store.
• Fix: The Use Orchestrator dropdown on the Advanced tab of the Certificate Authority A certificate authority (CA) is an entity that issues digital certificates. Within Keyfactor Command, a CA may be a Microsoft CA or a Keyfactor gateway to a cloud-based or remote CA. add/edit page has been updated to be a search select type field to support a larger number of possible orchestrators. In addition, the dropdown now displays both the orchestrator Keyfactor orchestrators perform a variety of functions, including managing certificate stores and SSH key stores. name and the service account the orchestrator is using to connect to Keyfactor Command of any orchestrators approved in Keyfactor Command with the CA capability.

Known Issues

• If a user successfully authenticates to the Keyfactor Command Management Portal but does not have authorization to view the page requested, the user will receive a redirect error rather than the expected access denied message. This will be corrected in a future release.

• When the response from a workflow REST step is returned as a JSON string containing an array of values, selected values from the array (as opposed to the response as a whole) cannot be specified in subsequent workflow steps such as email messages. In other words, $(MyResponse) will output the entire returned value, but $(MyResponse[0]) or $(MyResponse[0].DisplayName) will not output the first element of the array or the display name of the first element of the array. The data needs further processing in order to be used (see Invoke REST Request).

Deprecation

• See the 12.0 release notes (Deprecation & Removals) regarding deprecation and removal of the following products: Keyfactor Java Agent The Java Agent, one of Keyfactor's suite of orchestrators, is used to perform discovery of Java keystores and PEM certificate stores, to inventory discovered stores, and to push certificates out to stores as needed., Keyfactor Windows Orchestrator, Keyfactor Mac Auto-Enroll Agent, and Classic API An API is a set of functions to allow creation of applications. Keyfactor offers the Keyfactor API, which allows third-party software to integrate with the advanced certificate enrollment and management features of Keyfactor Command..

Notices

• Logi License Expiration: Keyfactor Command uses the Logi Analytics Platform for both the Management Portal dashboard and the built-in reports. The license required for Logi is integrated into Keyfactor Command and resides within the product’s Logi folder. The current 3-year license expires on 29 November 2024 and carries a 7 day grace period. During that grace period, an alert will appear in the Management Portal on the dashboard and in the reports. At the conclusion of the grace period, the dashboard and reports will no longer be available and an error will appear when users attempt to access these unless the license is updated.

  • Customers upgrading to release 12.4 or later of Keyfactor Command prior to this date (6 December 2024) do not need to take action. The new Logi license will be installed along with the upgrade.

  • Customers not upgrading to release 12.4 before this date need to manually install the new license for Logi prior to the end of the grace period (6 December 2024). The license may be installed prior to the start of the grace period. For more information about upgrading the Logi license and to download the new license, see the Keyfactor software portal:

    https://software.keyfactor.com/Software
    Note:  The Keyfactor software portal requires authentication. Contact your customer success manager or Keyfactor support if you need help authenticating to the portal.

API Endpoint Change Log

Please review the information in the API Change Log for this release carefully if you have implemented any integration using these endpoints: API Change Log v12.4.