Release Note Details v24.4
The following table includes a complete list of the features (large enhancements), product backlog items (small enhancements or segments of a larger feature), and bug fixes included in release v24.4.
Table 120: Items for Release v24.4
| ID | Product Area | Type | Description |
|---|---|---|---|
| 53633 | .NET | Product Backlog Item | Make SecretsManager Support DI |
| 55155 | Alerts | Product Backlog Item | Add a mechanism to allow users to determine how to handle ‘+’ signs in CRL URLs |
| 61769 | Alerts | Product Backlog Item | Test Button for CRL/OCSP Location Reachability |
| 63290 | Alerts | Product Backlog Item | Update ‘Encode as Plus Signs’ to ‘Delta CRL’ for revocation monitoring |
| 63662 | Alerts | Product Backlog Item | Fail Legacy Alerts/ Workflows if using PowerShell5.1 and upgraded to containers |
| 47552 | Alerts | Feature | Add a mechanism to allow users to determine how to handle ‘+’ signs in CRL URLs |
| 57980 | Alerts | Feature | Refactor Alerts out of EF |
| 56996 | Alerts | Bug | Alert with workflow can be deleted without deleting workflow |
| 58402 | Alerts | Bug | Alerts - UI, empty agent pool alert does not render the html properly |
| 60983 | Alerts | Bug | Alerts - When editing a parameter in an event handler, the type displayed is incorrect. |
| 62191 | Alerts | Bug | OCSP Revocation Monitoring Alert - Method is reverting back to CMS when updating the Location URL |
| 62266 | Alerts | Bug | Revocation Monitoring Alert - Show on Dashboard/Workflow start error messages |
| 63516 | Alerts | Bug | Monitoring Execution Schedule Reverts to Previous Schedule After Being Turned Off |
| 63659 | Alerts | Bug | Confirmation Operation Message ‘The CRL/OCSP endpoint was not reachable’ is displayed When Invalid Email is Entered in Revocation Monitoring |
| 63807 | Alerts | Bug | Revocation Monitoring Alert Tooltip Inaccurate |
| 64601 | Alerts | Bug | Expected Collections Missing from Expiration Alerts Dropdown |
| 64633 | Alerts | Bug | Adding New or Editing Existing Revocation Monitoring Alert Either Times Out or Takes a Long Time to Open |
| 64650 | Alerts | Bug | EJBCA CRL with + not for Delta Can't be Saved for Revocation Monitoring Alert |
| 48715 | API | Product Backlog Item | Rework CATemplateCache to Work on Linux |
| 61344 | API | Product Backlog Item | Revoke all API does not have any fail safes attached to it |
| 62015 | API | Product Backlog Item | Update POST /RevokeAll Request Header Validation Message |
| 62188 | API | Product Backlog Item | Remove ModelValidationFilterAttribute from Command |
| 45652 | API | Feature | Revoke all Api does not have any fail safes attached to it |
| 62680 | API | Feature | Remove ModelValidationFilterAttribute from Command |
| 56378 | API | Bug | GET /Agents - AgentPlatform value returned is incorrect for Universal Orchestrator |
| 61171 | API | Bug | Verbosity on GET /Certificates Confusing |
| 61902 | API | Bug | Excessive Logging in the PolicyFactory during Pod Health Checks |
| 62559 | API | Bug | POST/Certificate/Download - Error message shows System.Byte[] instead of requested Serial Number |
| 63015 | API | Bug | 403 errors lack correlation ID |
| 63213 | API | Bug | Swagger Link Relies on Request URL |
| 63424 | API | Bug | QueryString ignored for GET/Alerts/Pending API endpoint |
| 63629 | API | Bug | Incorrect ServerRequired Value in POST/CertificateStoreTypes Response When Adding IISU Extension |
| 63721 | API | Bug | Incorrect Parameter Description for DELETE /PamProviders/Types/{id} in Swagger and also in Documentation |
| 64122 | API | Bug | Incorrect 200 Response Code When Submitting POST /PamProviders/Types Without Required Parameters |
| 61049 | Application Settings | Product Backlog Item | Remove API Throttling App Setting |
| 61111 | Application Settings | Product Backlog Item | Revise Description for “Allow Deprecated API calls” |
| 62135 | Application Settings | Product Backlog Item | Update Application Setting Page to use standard Toggle component |
| 62136 | Application Settings | Product Backlog Item | Update Application Setting Page to use standard UI Form components |
| 61292 | Application Settings | Feature | Remove API Throttling App Setting |
| 61971 | Application Settings | Feature | Update description of “Allow Deprecated API calls” |
| 61987 | Application Settings | Feature | Update Application Setting Page to use standard UI components |
| 61992 | Application Settings | Feature | Update TaskQueue App Setting wording |
| 61366 | Application Settings | Bug | PUT/AppSetting - Response value displays the old value even new value is updated. |
| 64165 | Application Settings | Bug | Error Trying to Set File Extension App Setting to p12 |
| 54027 | Audit | Product Backlog Item | User Logon/Logoff Auditing |
| 63801 | Audit | Product Backlog Item | Change Audit Log Messaging, operations |
| 49120 | Audit | Feature | User Logon/Logoff Auditing |
| 63610 | Audit | Bug | Audit Logs not generated for application settings |
| 48637 | Build | Product Backlog Item | Database Creation/Upgrade |
| 48793 | Build | Product Backlog Item | Command Dockerfiles all use a startup script |
| 48794 | Build | Product Backlog Item | Dockerfile for the new Config Tool |
| 48864 | Build | Product Backlog Item | Database and AppSettings set from ENV variables |
| 52229 | Build | Product Backlog Item | Implement new maintenance mode database property |
| 60738 | Build | Product Backlog Item | Command 24.4 Package Updates |
| 60739 | Build | Product Backlog Item | UO Package Updates |
| 60740 | Build | Product Backlog Item | Remote CA Connector Client Package Updates |
| 48622 | Build | Feature | API Container |
| 48623 | Build | Feature | Claims Proxy Container |
| 48624 | Build | Feature | Web Console Container |
| 48625 | Build | Feature | Orchestrators API Container |
| 48626 | Build | Feature | Timer Service Container |
| 60741 | Build | Feature | Command 24.4 Package Updates |
| 54678 | Build | Bug | GetAppEncryptorFactoryTest Failing due to obfuscation |
| 52624 | Certificate Authorities | Product Backlog Item | Remove Delegation From UI |
| 52676 | Certificate Authorities | Product Backlog Item | Remove Delegation Related Columns from Database |
| 54365 | Certificate Authorities | Product Backlog Item | Delegation Only Supported in MSI Installations |
| 59715 | Certificate Authorities | Product Backlog Item | PUT /CertificateAuthority/TaskQueue with password using PAM provider is not updated |
| 60925 | Certificate Authorities | Product Backlog Item | Replace Direct EF Calls in Templates, CAs, and Enrollment |
| 60931 | Certificate Authorities | Product Backlog Item | Remove EF From ICertificateAuthorityService |
| 60932 | Certificate Authorities | Product Backlog Item | Remove Certificate Authorities from IEFModels |
| 61853 | Certificate Authorities | Product Backlog Item | Replace Direct EF Calls in Reports & Dashboard |
| 62081 | Certificate Authorities | Product Backlog Item | Replace Direct EF Calls in Alerts |
| 57978 | Certificate Authorities | Feature | Refactor Certificate Authorities out of EF |
| 55968 | Certificate Authorities | Bug | Leading # need escaped for EJBCA Revoke, Publish CRL, and Enforce Unique DN |
| 62179 | Certificate Authorities | Bug | Updating EJBCA Requires Re-uploading Auth Cert |
| 62849 | Certificate Authorities | Bug | Clearer message that Time field cannot be blank |
| 63488 | Certificate Authorities | Bug | Threshold Schedule Resets to ‘Off’ After Saving in Monitoring Settings |
| 63572 | Certificate Authorities | Bug | Yup Validation Errors not using field display names on CA Edit Panel |
| 64102 | Certificate Authorities | Bug | CA Validation Fails After Updating PAM Secret Entry Until IIS Reset is Performed |
| 64256 | Certificate Authorities | Bug | EJBCA CA with Cert Auth Fails on Save but Tests OK |
| 64326 | Certificate Authorities | Bug | CertificateAuthority - Removing Explicit PAM Credentials does not remove the entry from the PAM Values DB table. |
| 61861 | Certificate Collections | Bug | Collection Order Dialog - no wait dialog and dialog cannot be moved vertically |
| 62394 | Certificate Collections | Bug | AuditLog - The system do not log anything when using endpoint POST /CertificateCollections |
| 62687 | Certificate Collections | Bug | Container permissions are not working without global permissions |
| 61006 | Certificate Details | Product Backlog Item | Change Schema to Support Alternative Keys |
| 61141 | Certificate Details | Product Backlog Item | Create certificate query parsers for PQC data |
| 61332 | Certificate Details | Product Backlog Item | Command portal does not display unknown EKU OIDs |
| 61334 | Certificate Details | Product Backlog Item | EKUs on Certificate Details should use the list view |
| 61758 | Certificate Details | Product Backlog Item | Friendly Name for PFX Downloads |
| 62240 | Certificate Details | Product Backlog Item | Re-design the certificate download dialog |
| 62767 | Certificate Details | Product Backlog Item | Custom Password for PFX Downloads |
| 64167 | Certificate Details | Product Backlog Item | Add warning about Curve limitations to the Certificate Details Dialog |
| 40384 | Certificate Details | Feature | Re-design and updates to Download options |
| 60605 | Certificate Details | Feature | EKUs on Certificate Details should use the list view |
| 60211 | Certificate Details | Bug | Command portal does not display unknown EKU OIDs |
| 62578 | Certificate Details | Bug | [KeyfactorAPI] PUT/Certificates/id/Owner missing validation for Owner Role Id & Name |
| 63368 | Certificate Details | Bug | Key Usage field blank for all certs in v12.3 and v12.4 |
| 64796 | Certificate Details | Bug | Chain Validation not working for PQ certs and some new ECC curve certs |
| 60729 | Certificate Enrollment | Product Backlog Item | PQC CSR Generation |
| 61145 | Certificate Enrollment | Product Backlog Item | Hybrid CSR Generation UI support |
| 62156 | Certificate Enrollment | Product Backlog Item | Hide Use Legacy Encryption Option |
| 62527 | Certificate Enrollment | Product Backlog Item | Command can enroll for certs with over 4KB of SANs against ADCS |
| 62838 | Certificate Enrollment | Product Backlog Item | Reformat Hybrid CSR Generation Input |
| 62868 | Certificate Enrollment | Product Backlog Item | Command can enroll for large numbers of SANs against EJBCA |
| 62945 | Certificate Enrollment | Product Backlog Item | Command can enroll for certs with custom OtherName SANs against ADCS |
| 62946 | Certificate Enrollment | Product Backlog Item | Command can enroll for certs with custom OtherName SANs against EJBCA |
| 63993 | Certificate Enrollment | Product Backlog Item | Add Filtering of Curves to the UI |
| 61190 | Certificate Enrollment | Feature | CSR Support for SAN Type “Other Name” |
| 61291 | Certificate Enrollment | Feature | Enable Hybrid PQ Enrollment (PEM Only) |
| 61957 | Certificate Enrollment | Feature | Accept larger CSRs |
| 62161 | Certificate Enrollment | Feature | Additional ECC Algorithm Support in Command |
| 53007 | Certificate Enrollment | Bug | Null reference error when navigating to Enrollment pages when template has no keys/sizes |
| 58676 | Certificate Enrollment | Bug | POST_Enrollment_PFX : Enroll successfully with password contains special characters when “Only use Alphanumeric Characters” = true |
| 60866 | Certificate Enrollment | Bug | PFX/CSR - When set at the global or template level, the Default Certificate Owner Role Name does not appear as the default in the Owner Role Name field |
| 62141 | Certificate Enrollment | Bug | CSR enrollment throws regex errors for IP SANs present in CSR |
| 62157 | Certificate Enrollment | Bug | Certificate owner role not granted on add certificate import |
| 62959 | Certificate Enrollment | Bug | Error when enrolling with PFX Ed448 and Ed25519 (Containers only) |
| 63098 | Certificate Enrollment | Bug | Incorrect Validation Warning for Valid Emails during Renewal via CONFIGURE |
| 63358 | Certificate Enrollment | Bug | Attempting to access AD information in Containers |
| 63562 | Certificate Enrollment | Bug | Misspelling in PFX enrollment download dialog |
| 64543 | Certificate Enrollment | Bug | Command is creating two users for every one user in the DB, which is causing reenrollment errors |
| 64815 | Certificate Enrollment | Bug | ECC Templates cannot enroll if “Allow Public Key Reuse” is disabled |
| 64816 | Certificate Enrollment | Bug | Parse CSR Generating Object Reference Error without Alt Key |
| 61045 | Certificate Metadata | Product Backlog Item | Create generic component for ‘Force Delete’ |
| 61086 | Certificate Metadata | Product Backlog Item | Add a ‘Force Delete’ dialog to MetadataTypes |
| 61739 | Certificate Metadata | Product Backlog Item | Create MetadataStagingField Datastore |
| 61740 | Certificate Metadata | Product Backlog Item | Create MetadataFieldType Datastore Get Operations |
| 61741 | Certificate Metadata | Product Backlog Item | Refactor Metadata Methods Out of ConfigurationService |
| 61742 | Certificate Metadata | Product Backlog Item | Remove EF Metadata Models |
| 59823 | Certificate Metadata | Feature | Ability to Delete Metadata Type Even When Certificates Have a Value for that Metadata Field |
| 62852 | Certificate Metadata | Bug | Confirm Metadata Delete Dialog Hint Text |
| 64721 | Certificate Metadata | Bug | Metadata date field year can't be entered |
| 60725 | Certificate Operations | Product Backlog Item | Support Downloading PQC Certificates |
| 60825 | Certificate Operations | Product Backlog Item | Add GET /License/UsageLog endpoint and download link |
| 61759 | Certificate Operations | Product Backlog Item | Application setting to default check the Include Chain and/or Include Private Key on certificate download |
| 62053 | Certificate Operations | Product Backlog Item | PQC Sprint Review Suggestions |
| 62260 | Certificate Operations | Product Backlog Item | Keyfactor.PKI Chain Builder should Consider OS Certificate Trust Stores by Default |
| 62763 | Certificate Operations | Product Backlog Item | Support PEM file format for cert import |
| 63023 | Certificate Operations | Product Backlog Item | Support PQC/Hybrid PEM files for cert import |
| 64107 | Certificate Operations | Product Backlog Item | Download Dialog Feedback Changes |
| 45517 | Certificate Operations | Feature | Application setting to default check the Include Chain and/or Include Private Key on certificate download |
| 60620 | Certificate Operations | Feature | Log licensing details to “License and Usage Log” |
| 62174 | Certificate Operations | Feature | Keyfactor.PKI Chain Builder should Consider OS Certificate Trust Stores by Default |
| 64495 | Certificate Operations | Bug | API CSR Generation with AlternativeCurve Failing |
| 66435 | Certificate Operations | Bug | OAuth InternalAPI fails to schedule CertStoreJobs (ExpirationRenewal/Workflow) |
| 59496 | Certificate Search | Bug | Unable to Filter Certificates with Multiple EKUNames using -notcontains |
| 62747 | Certificate Search | Bug | Unable to download certificates without private key |
| 62748 | Certificate Search | Bug | Chain order not set by default when ‘Include Chain by default’ app setting is true |
| 62839 | Certificate Search | Bug | POST/Certificates/Download - Do not allow downloading P7B certificate format when includeChain is false |
| 62264 | Certificate Stores | Product Backlog Item | Set provider permissions for migrated secrets |
| 62734 | Certificate Stores | Product Backlog Item | Update cert store types to include a flag for sending in PEM vs PFX format |
| 62927 | Certificate Stores | Product Backlog Item | Ability to schedule cert store inventory jobs to run Monthly |
| 63038 | Certificate Stores | Product Backlog Item | Update UI to include CertificateFormat for store types |
| 64692 | Certificate Stores | Product Backlog Item | Management Add Hybrid Cert Include Private Key in JobCertificate Content |
| 64694 | Certificate Stores | Product Backlog Item | Management Add Hybrid Cert as PEM Format Include Chain in JobCertificate Content |
| 58556 | Certificate Stores | Feature | CertStore secret migration to local PAM provider |
| 60654 | Certificate Stores | Feature | Ability to schedule cert store inventory jobs to run monthly |
| 58220 | Certificate Stores | Bug | Certificate Stores -The inventory schedule isn't being updated via the edit dialog when the container assigned to the store is set to overwrite the certificate store schedule. |
| 60879 | Certificate Stores | Bug | A discovery job with No Value set for Server username/password that is failing will continuously run |
| 62856 | Certificate Stores | Bug | Invalid inventory entry parameters cause inventory failure but do not fail inventory jobs |
| 63519 | Certificate Stores | Bug | Error in POST/PUT CertificateStoreType |
| 63631 | Certificate Stores | Bug | Server Username and Password Fields Not Retaining Values After Save in Certificate Store |
| 53220 | Certificate Templates | Product Backlog Item | Remove UseAllowedRequesters for Templates |
| 58572 | Certificate Templates | Bug | Clicking on stub template results in an error message |
| 61088 | Certificate Templates | Bug | Misleading “template not found” message for Enrollment |
| 62140 | Certificate Templates | Bug | Template with ECC Key Size but no Curve OID Hangs CA Template Sync |
| 48797 | Containers | Product Backlog Item | Command Containers do not run as root user |
| 52346 | Containers | Product Backlog Item | Remove AD Attribute Parsers |
| 54003 | Containers | Product Backlog Item | Implement RawKeyEncryptor |
| 54017 | Containers | Product Backlog Item | Reports can be scheduled and emailed in a Container Environment |
| 54066 | Containers | Product Backlog Item | Reencrypt All Secrets Detection |
| 54261 | Containers | Product Backlog Item | Baseline Helm Chart for Command Web apps |
| 54292 | Containers | Product Backlog Item | All drilldowns for dashboards are implemented |
| 54303 | Containers | Product Backlog Item | Implement Fortanix REST Encryptor |
| 54304 | Containers | Product Backlog Item | Add Raw Key Option to Configuration Wizard |
| 54675 | Containers | Product Backlog Item | Update Configuration Tool to setup IdP settings |
| 54676 | Containers | Product Backlog Item | Replace KeyfactorAPISecret with KeyfactorSecret in CertificateAuthority Model |
| 54774 | Containers | Product Backlog Item | Revocation Monitoring dashboard panel run successfully |
| 54959 | Containers | Product Backlog Item | Can add and remove panels from the dashboard |
| 54961 | Containers | Product Backlog Item | Remove KeyfactorSecretRequestOld |
| 54979 | Containers | Product Backlog Item | Implement secure key for Logi in containers |
| 54999 | Containers | Product Backlog Item | Remove ResolvedSecret |
| 55144 | Containers | Product Backlog Item | NLog Logging Level Configurable |
| 55327 | Containers | Product Backlog Item | Graceful Shutdown of Command Containers |
| 55410 | Containers | Product Backlog Item | Convert Command Applications to UBI Base |
| 55411 | Containers | Product Backlog Item | Logi Container runs as different user than ‘root’ |
| 55412 | Containers | Product Backlog Item | Convert Logi Container to UBI Base |
| 56038 | Containers | Product Backlog Item | Certificate Authority dashboard panels run successfully |
| 56083 | Containers | Product Backlog Item | Rework known dependencies on the registry |
| 56099 | Containers | Product Backlog Item | Remove Dependency on Directory Services |
| 56195 | Containers | Product Backlog Item | Helm Charts for chartless Command Apps |
| 56197 | Containers | Product Backlog Item | Init container Mode on DB Config Tool |
| 56239 | Containers | Product Backlog Item | Disable Automatic Build Metadata for Docker Build Steps |
| 56329 | Containers | Product Backlog Item | Initialize RabbitMQ Settings |
| 56366 | Containers | Product Backlog Item | Disable Audit Event Logger in Container builds |
| 56367 | Containers | Product Backlog Item | Add IDP Configuration to DBConfig Tool Helm Chart |
| 56368 | Containers | Product Backlog Item | Helm Chart Secrets |
| 57942 | Containers | Product Backlog Item | Swagger URL Fix |
| 58004 | Containers | Product Backlog Item | Save Virtual Directory URLs During DB Config Tool Execution |
| 58593 | Containers | Product Backlog Item | Allow CA Client Factory to build clients to Remote DCOM CAs |
| 59759 | Containers | Product Backlog Item | Incorporate Logi Dashboard into Command in a container environment |
| 59781 | Containers | Product Backlog Item | Add reporting capability to Command in container environment |
| 59929 | Containers | Product Backlog Item | Disable the functionality to schedule and save reports in a folder location in Containers |
| 59992 | Containers | Product Backlog Item | Rework app encryption settings to be mounted from a config map |
| 60228 | Containers | Product Backlog Item | Rework Command Helm Chart Organization |
| 60277 | Containers | Product Backlog Item | Health Check / Liveness probes for web pods |
| 60685 | Containers | Product Backlog Item | Modify Ingress controller to properly build redirect urls for logi |
| 60687 | Containers | Product Backlog Item | Excel exports work properly |
| 60723 | Containers | Product Backlog Item | Chart creates or uses existing Service Account |
| 60724 | Containers | Product Backlog Item | NLog Config Overrides for Command Containers |
| 60727 | Containers | Product Backlog Item | Connection Strings Secret Generated |
| 60828 | Containers | Product Backlog Item | Enable and Disable Command Components from Helm Values |
| 60829 | Containers | Product Backlog Item | DB Config Tool Inputs as Config maps and Secrets |
| 61138 | Containers | Product Backlog Item | Advanced Helm Configurability via Values |
| 61144 | Containers | Product Backlog Item | Licensing API Endpoint to Work Cross Platform |
| 61146 | Containers | Product Backlog Item | Rework the DBConfig Tool to be a separate executable for database upgrades without reinstalling Command bits |
| 61244 | Containers | Product Backlog Item | Create Second Service for Reporting to Handle internal networking |
| 61245 | Containers | Product Backlog Item | Create Second Ingress Controller for Sticky Sessions |
| 61667 | Containers | Product Backlog Item | Connection string secret not created if one already exists |
| 61676 | Containers | Product Backlog Item | Disable Nashorn engine spam warnings |
| 61885 | Containers | Product Backlog Item | Rename DBConfigTool to DBUpgradeTool |
| 61943 | Containers | Product Backlog Item | Consolidate Helm Chart Deployments into 1 template |
| 62172 | Containers | Product Backlog Item | PDB Recommendations in Helm |
| 62316 | Containers | Product Backlog Item | Update Logi license in Command's container version |
| 62372 | Containers | Product Backlog Item | Session's first load of Logi report takes a very long time |
| 63030 | Containers | Product Backlog Item | Consolidate Values file Hostnames and Application URL paths |
| 63031 | Containers | Product Backlog Item | Convert Helm Chart to v1.0 for Release |
| 63661 | Containers | Product Backlog Item | Allow Probe Settings to be Set In Values File |
| 64604 | Containers | Product Backlog Item | Command Apps Custom NLog Config Rework |
| 64605 | Containers | Product Backlog Item | UO Custom NLog Config Rework |
| 64765 | Containers | Product Backlog Item | Helm Chart Parity for the UO with Command and Gateway Charts |
| 38848 | Containers | Feature | Java based Logi |
| 48572 | Containers | Feature | New Command Configuration Tool |
| 48621 | Containers | Feature | Build and Dev Environment Updates |
| 48631 | Containers | Feature | K8s Helm Chart |
| 48726 | Containers | Feature | Rework Auditing to work on Linux |
| 48739 | Containers | Feature | Command: Allow secrets key storage in AKV |
| 52215 | Containers | Feature | Orchestrator Auto-Registration Removal |
| 52216 | Containers | Feature | Delegation Only Supported in MSI Installations |
| 52217 | Containers | Feature | Remove AD Attribute Parsers |
| 54015 | Containers | Feature | Add Reporting capability into Command in a container environment |
| 54016 | Containers | Feature | Dashboard loads in Command in a container environment |
| 54123 | Containers | Feature | App Encryption for Containers |
| 54257 | Containers | Feature | Containers don't run as the ‘root’ user |
| 54259 | Containers | Feature | Don't include devops labels on Container Builds |
| 54293 | Containers | Feature | Command Secret Handling Refactor for Services |
| 54339 | Containers | Feature | P11 App Encryption Support |
| 54340 | Containers | Feature | Fortanix App Encryption Support |
| 54342 | Containers | Feature | Add Missing Applications to Docker Compose |
| 54345 | Containers | Feature | CA Connector API Container |
| 54346 | Containers | Feature | Both MSI and Containers are deliverable from the features/containers branch |
| 54583 | Containers | Feature | Convert All Containers to use UBI as base |
| 55019 | Containers | Feature | Command app NLog Configuration is mountable from Config Map |
| 55020 | Containers | Feature | NLog Logging Level Configurable |
| 55030 | Containers | Feature | Mountable Logos |
| 55031 | Containers | Feature | Graceful Container Shutdowns |
| 55924 | Containers | Feature | Remove Dependency on Directory Services |
| 55930 | Containers | Feature | Swagger URL Fix |
| 56010 | Containers | Feature | Rework known Dependencies on the Registry |
| 56196 | Containers | Feature | DBConfigTool can function as Init Container |
| 56364 | Containers | Feature | Timer Service License Validation job uses DB instead of registry to store last run times |
| 56370 | Containers | Feature | Sticky Sessions for Logi and the CA Connector API |
| 58002 | Containers | Feature | DB Config Tool Saves URL Vdirs and Hostnames |
| 58461 | Containers | Feature | RBAC and Service Account for Command Helm |
| 58475 | Containers | Feature | HPA/PDB Scaling Recommendations in Helm |
| 58591 | Containers | Feature | Allow CA Client Factory to build clients to Remote DCOM CAs |
| 59822 | Containers | Feature | Helm Resource Configurability for Cloud Ops |
| 59829 | Containers | Feature | Health Check / Liveness probes for web pods |
| 59845 | Containers | Feature | Enable and Disable Command Components from Helm Values |
| 59986 | Containers | Feature | Rework app encryption settings to be mounted from a config map |
| 59987 | Containers | Feature | Helm secret creation and requirements updated |
| 60399 | Containers | Feature | DB Config Tool Inputs as Config maps and Secrets |
| 60943 | Containers | Feature | Licensing API Endpoints work cross platform |
| 61942 | Containers | Feature | Consolidate Helm Deployment templates into One |
| 62562 | Containers | Feature | Consolidate Values file Hostnames and Application URL paths |
| 62766 | Containers | Feature | Convert Helm Chart to v1.0 for Release |
| 63573 | Containers | Feature | Liveness and Healthcheck probe timings can be set via the values file |
| 64600 | Containers | Feature | Rework Containerized Apps Custom NLog Configuration |
| 55505 | Containers | Bug | Unable to Connect to Logi Analytics Endpoint |
| 55941 | Containers | Bug | CA Status dashboard errors while processing the request |
| 56013 | Containers | Bug | Timer Service and DB Config Tool require ASPNET to run |
| 56341 | Containers | Bug | Unable to load Fortanix.SDKMS In Config Wizard |
| 60292 | Containers | Bug | EJBCA Sync Failing in Containers |
| 60818 | Containers | Bug | Helm License Secret Error |
| 60835 | Containers | Bug | Ingress Service Paths not matching auto-generated service names |
| 60868 | Containers | Bug | Admin User Not Created by DB Config Tool |
| 61855 | Containers | Bug | Helm Chart Analysis Services Clobbered into one |
| 62633 | Containers | Bug | Auth0 Token Audience and Token Scope settings missing from DB Upgrade Tool |
| 62765 | Containers | Bug | Connection string templates set “Encrypt=false” by default in the Helm Chart |
| 63790 | Containers | Bug | Portal url in helm deployment output missing hostname and path |
| 64119 | Containers | Bug | License Error on Upgrade with Migration to Containers |
| 52493 | Dashboard | Product Backlog Item | Logi Containerization |
| 53620 | Dashboard | Product Backlog Item | Create a dockerfile that will run a report |
| 53621 | Dashboard | Product Backlog Item | Create bash script to insert connection string into settings file |
| 56327 | Dashboard | Product Backlog Item | Consolidate Logi Projects |
| 59924 | Dashboard | Product Backlog Item | User dashboards are saved in the database in dbo.SavedDashboards table |
| 54516 | Dashboard | Feature | Support for Dashboard User Settings Load Balancing |
| 56168 | Dashboard | Feature | Consolidate Logi Projects |
| 59761 | Dashboard | Feature | Logi settings and refinements |
| 59930 | Dashboard | Feature | Debugging for reports and dashboard |
| 62315 | Dashboard | Feature | Update Logi license in Container version |
| 62192 | Dashboard | Bug | Dashboard fails to load when Encrypt is true in SqlDirect connection string |
| 62327 | Dashboard | Bug | Dashboard Please Wait Dialog never goes away |
| 60991 | Data Layer | Product Backlog Item | Remove EF from Agent Notification Alert |
| 60992 | Data Layer | Product Backlog Item | Remove EF from CA Health Alert |
| 60993 | Data Layer | Product Backlog Item | Remove EF from CA Threshold Alert |
| 60994 | Data Layer | Product Backlog Item | Remove EF from Revocation Monitoring Alert |
| 60995 | Data Layer | Product Backlog Item | Remove EF from Denied Alert |
| 60996 | Data Layer | Product Backlog Item | Remove EF from Expiration Alert |
| 60997 | Data Layer | Product Backlog Item | Remove EF from Issued Alert |
| 60998 | Data Layer | Product Backlog Item | Remove EF from Pending Alert |
| 60999 | Data Layer | Product Backlog Item | Remove EF from SSH Key Rotation Alert |
| 61001 | Data Layer | Product Backlog Item | Remove All Alert Tables from EF |
| 61195 | Data Layer | Product Backlog Item | Replace EF MetadataFieldType Calls to Use MetadataTypeDataStore Methods |
| 44815 | Data Layer | Feature | Complete DAL migration for Metadata |
| 62974 | EJBCA Integration | Product Backlog Item | Update EJBCA Client Usage in Command |
| 63195 | EJBCA Integration | Product Backlog Item | Edit RequestGenerator to use Curve Information |
| 63196 | EJBCA Integration | Product Backlog Item | Update ECC Curves/Key Lengths throughout Command |
| 63197 | EJBCA Integration | Product Backlog Item | Update use of Curves from the RequestDecoder in Command |
| 63198 | EJBCA Integration | Product Backlog Item | Supply Curve information to the RequestGenerator |
| 62973 | EJBCA Integration | Feature | Update EJBCA Client in Command for .NET 8 |
| 60984 | EJBCA Integration | Bug | EJBCAClient creates excessive HttpClients |
| 64246 | EJBCA Integration | Bug | EJBCA enrollment password plaintext outputted in Trace logs |
| 64250 | EJBCA Integration | Bug | Enrollment errors with EJBCA CA not properly escaping characters |
| 55521 | Identity Providers | Product Backlog Item | Keyfactor Secret HasValue should be true for empty strings |
| 63615 | Identity Providers | Bug | IdentityProviders - API, disabling/enabling an IDP requires an IIS RESET |
| 62261 | Installation | Product Backlog Item | Support PAM Secrets saving and loading in the Config Wizard |
| 62929 | Installation | Product Backlog Item | Update secret fields to allow PAM provider secrets |
| 63097 | Installation | Product Backlog Item | Include PAM support for email explicit credentials of configuration wizard |
| 64327 | Installation | Product Backlog Item | Config wizard PAM provider support cleanup |
| 58383 | Installation | Feature | Rework the DBConfig Tool to be a separate executable for database upgrades without reinstalling Command bits |
| 60546 | Installation | Feature | Support Secrets managed by PAM in the Config Wizard |
| 55404 | Installation | Bug | Configuration Wizard Crashes During Use |
| 61210 | Installation | Bug | Cannot Load Config in Command |
| 62147 | Installation | Bug | FETCH Button Remains Disabled After Entering Discovery Document Endpoint URL in Config Wizard |
| 62201 | Installation | Bug | AuditUpdateSigningKeyUpgradeModule fails when connection string uses “Persist Security Info=False” |
| 62355 | Installation | Bug | NRE when not using client cert auth on manually-populated config wizard |
| 64106 | Logging | Bug | Database Upgrade Tool Does Not Create Log File |
| 64693 | Logging | Bug | NLog autoreload doesn't work as expected in a container environment |
| 62148 | Management Portal | Bug | Command Session timeout error message |
| 62762 | Management Portal | Bug | Default IdP login page redirect not working after using a secondary IdP |
| 63073 | Management Portal | Bug | Toast Styling is lopsided |
| 58292 | Orchestrator API | Bug | Orchestrator Job History Limit Not Applied for Job Failed in Configure Step |
| 64387 | Orchestrator Management | Bug | JKS Discovery Job Configuration Fails |
| 38545 | Orchestrators | Product Backlog Item | ReenrollmentJobConfiguration Should Have a Way to Access the Alias |
| 52344 | Orchestrators | Product Backlog Item | Orchestrator Auto-Registration Removal |
| 52591 | Orchestrators | Product Backlog Item | Remove Agent Auto Registration Permissions |
| 62737 | Orchestrators | Product Backlog Item | Management job configure response sends certs in correct PFX/PEM format |
| 62738 | Orchestrators | Product Backlog Item | Management job sends new format flag to orchestrator job extension |
| 63553 | Orchestrators | Product Backlog Item | Include SANs and Overwrite in Reenrollment |
| 64620 | Orchestrators | Product Backlog Item | Update CertificateFormat enum values |
| 58494 | Orchestrators | Feature | Add Alias to Reenrollment Job Configuration |
| 62282 | Orchestrators | Feature | Support PEM format for Management Add jobs with private keys |
| 34356 | Orchestrators | Bug | Discovery Jobs that never return attempt to rerun endlessly |
| 44030 | Orchestrators | Bug | Make the “target” column consistent from the job history page and the scheduled jobs page |
| 61377 | PAM | Product Backlog Item | Refactor PAM out of EF - PAM Service |
| 61379 | PAM | Product Backlog Item | Refactor PAM out of EF - Secret Service |
| 61385 | PAM | Product Backlog Item | Refactor PAM out of EF - SecurityRolePermission Service |
| 62416 | PAM | Product Backlog Item | PamProviders - EF migration to Dapper Datastores, consolidate Pam Provider DataStores |
| 62639 | PAM | Product Backlog Item | PAM Provider - Portal, Local PAM Provider Password Management updates |
| 62641 | PAM | Product Backlog Item | PAM Provider - Portal, PAM Provider Open Password grid button updates |
| 57981 | PAM | Feature | Refactor PAM out of EF |
| 61290 | PAM | Feature | Local PAM provider Secret Management UI |
| 60132 | PAM | Bug | DELETE /PamProviders/Types/{id} - Status code returns 500 when delete PamProvidersTypes. |
| 63928 | PAM | Bug | Local PAM Allows Deletion of Secret in Use |
| 63991 | PAM | Bug | LocalPAMProviderEntries - API, the Local PAM Provider entry create/update endpoints does not validate the MAX length of each fields |
| 63992 | PAM | Bug | LocalPAMProviderEntries - UI, the Local PAM Provider entry create/update dialog requires the Description field. |
| 64014 | PAM | Bug | Login Failure with IdP After Updating LocalDB PAM Provider Secret |
| 64127 | PAM | Bug | Error Incorrectly Triggered for Missing Parameters in Remote PAM Provider Setup |
| 61158 | Policy Modules | Product Backlog Item | Policy Module should run on .NET 8 |
| 61073 | Policy Modules | Feature | Policy Module should run on .NET 8 |
| 60121 | Post Quantum | Product Backlog Item | Update GET /Certificates/{id} to return alternative key pairs |
| 61755 | Post Quantum | Product Backlog Item | Enable Hybrid PQ CSR Enrollment |
| 62448 | Post Quantum | Product Backlog Item | Remove references to “Dilithium” |
| 58393 | Post Quantum | Feature | Post-Quantum Certificate (PQC) Infrastructure Changes |
| 58634 | Post Quantum | Feature | Command Platform Support for Housing Dilithium Keys and Hybrid Certificates |
| 61931 | Remote CA Management | Product Backlog Item | Move Task Queue Connection Tab to its own page |
| 61932 | Remote CA Management | Product Backlog Item | A warning is presented to the user when modifying the Task Queue Connection details |
| 62740 | Remote CA Management | Product Backlog Item | Update Task Queue App Settings Wording |
| 52582 | Remote CA Management | Feature | RabbitMQ connection setting rotation |
| 60547 | Remote CA Management | Feature | Task Queue supports secrets managed by PAM |
| 61696 | Remote CA Management | Feature | Move Task Queue Connection to Application Settings |
| 56578 | Remote CA Management | Bug | DCOM CA Permissions error no longer accurate |
| 61077 | Remote CA Management | Bug | CA Connector API AuthZ cache caches null entries |
| 62951 | Remote CA Management | Bug | Command CA Connector unable to authenticate using Role Claim |
| 54006 | Reporting | Product Backlog Item | Have the _Settings.lgx's rdDebuggerStyle value set during start up |
| 54008 | Reporting | Product Backlog Item | Upgrade Logi to v23.3 SP1 in the container feature branch |
| 58595 | Reporting | Product Backlog Item | Expiration Report By Days includes Renewal Info |
| 62173 | Reporting | Product Backlog Item | Styling for Dashboard and reports |
| 53641 | Reporting | Feature | Expiration Report By Days includes Renewal Info |
| 63271 | Reporting | Bug | SQL Errors Running Some Reports |
| 58003 | Security | Product Backlog Item | Update RawKey to AESKey for Application Encryptor |
| 58561 | Security | Product Backlog Item | Create P11 App Encryptor |
| 60742 | Security | Product Backlog Item | Certs store secrets migration tool |
| 61168 | Security | Product Backlog Item | Certs store secrets migration tool includes servers and custom fields |
| 61818 | Security | Product Backlog Item | Allow deletion of an invalid Claims in GUI |
| 61961 | Security | Product Backlog Item | Certs store secrets migration tool migrates store passwords |
| 63192 | Security | Product Backlog Item | Certs store secrets migration tool configuration updates |
| 63193 | Security | Product Backlog Item | Certs store secrets migration tool accepts sql connection string |
| 63194 | Security | Product Backlog Item | Certs store secrets migration tool test mode |
| 61110 | Security | Feature | Allow deletion of an invalid Claims in GUI |
| 58566 | Security | Bug | Claim Type Not Shown in Detailed Claim View for Claims of Type OAuth Client ID |
| 60108 | Security | Bug | Misleading error when certificate is not in a collection |
| 61166 | Security | Bug | User without Certificate Read permissions taken to Unexpected error page rather than getting popup error |
| 61243 | Security | Bug | GET /Security/Audit/Collections/{id} Returns Duplicate Roles with Different Permissions |
| 61888 | Security | Bug | Command - Expired secret cleanup service, does not get the ExpirationDate properly from the stored secret |
| 63557 | Security | Bug | Error in Delete Security Role |
| 63924 | Security | Bug | Endless Please Wait on Click of Something After OAuth Session Expires |
| 64156 | Security | Bug | AES Key Encryptor Requires Manual App Setting Update |
| 55461 | Services | Product Backlog Item | Remove * Handling from SecretService |
| 63299 | SSH | Bug | Error when generating SSH Key |
| 51504 | Uncategorized | Product Backlog Item | Rework routing to work with containers |
| 63616 | Uncategorized | Product Backlog Item | Update SearchSelect to use data |
| 52555 | Workflow | Product Backlog Item | Test Pending, Issued, and Denied Alerts |
| 60538 | Workflow | Product Backlog Item | Powershell 5.1 Compatibility Mode is disabled on Non-Windows Environments |
| 61089 | Workflow | Product Backlog Item | Replace Workflow Collection Status Force dialog with common component |
| 61756 | Workflow | Product Backlog Item | Allow Expiration Renewal Step to use expiring cert's CA and Template |
| 63671 | Workflow | Product Backlog Item | Update Options in Renewal Step |
| 53135 | Workflow | Feature | Test Pending, Issued, and Denied Alerts With Regard to Requester Tokens |
| 60537 | Workflow | Feature | Powershell 5.1 Compatibility Mode is disabled on Non-Windows Environments |
| 61208 | Workflow | Feature | Allow Expiration Renewal Step to use expiring cert's CA and Template |
| 55245 | Workflow | Bug | Workflow Token Dropdown Wrapped Line Spacing Too Crowded |
| 64573 | Workflow | Bug | $(requester) attributes not working in 12.4 |
Was this page helpful? Provide Feedback