The following table includes a complete list of the features (large enhancements), product backlog items (small enhancements or segments of a larger feature), and bug fixes included in release v26.2.1.
Table 98: Items for Release v26.2.1
| ID | Product Area | Type | Description |
|---|---|---|---|
| 84414 | .NET | Product Backlog Item | Create Next-Gen UI BFF Application |
| 82385 | .NET | Feature | 26.2 Package Updates |
| 81511 | Alerts | Product Backlog Item | Add "Id" query parser to GET /Monitoring/Revocation endpoint |
| 88041 | Alerts | Product Backlog Item | Implement alert TokenParsers endpoints for all alert types |
| 88044 | Alerts | Product Backlog Item | Modify GET /EventHandlerRegistration to support alertType filter |
| 81472 | Alerts | Bug | Key Rotation Alerts Incorrectly prompts user to configure workflow when Uses Workflow is set to false |
| 82985 | Alerts | Bug | SMTP AUTH LOGIN not supported in v25 |
| 87326 | Alerts | Bug | Alert PUT endpoints do not update selected workflow |
| 81048 | API | Product Backlog Item | Paged GET /MetadataFields/Names endpoint created |
| 84324 | API | Bug | GET /Enrollment/CSR\PFX/Context/My Methods Not Getting Enrollment Pattern Metadata Settings |
| 84404 | API | Bug | JWT Bearer Middleware May Exposes Token Data as Configured |
| 84585 | API | Bug | Swagger uses wrong URL in OAuth environment |
| 84346 | Application Settings | Product Backlog Item | App Settings Updates To ShortName And Removal Functionality |
| 85113 | Application Settings | Product Backlog Item | App settings information should be updated on database upgrade |
| 82337 | Application Settings | Bug | Configuration Wizard Changes App Values to Default on Fresh Installs |
| 81223 | Audit | Bug | Template and Enrollment Pattern Audit Log Details Show Erroneous Info |
| 81224 | Audit | Bug | Audit Related Entries Maxes at 100 and Shows Oldest Related Entries, Not Newest |
| 81225 | Audit | Bug | Audit Log Related Entries Has Grid Scroll Despite Available Space and Small Number of Records |
| 84140 | Audit | Bug | Unable to complete configuration when syslog is enabled |
| 85007 | Audit | Bug | Audit log missing Trust bundle - Certificates changes |
| 72412 | Build | Feature | Remaining Centralized Package Management |
| 72416 | Build | Feature | Tooling for C++/CLI binding redirect generation |
| 84750 | Build | Bug | BumpVersion.ps1 is changing the OTel chart version when it shouldn't be |
| 81139 | CA Gateway - Cloud Gateway | Product Backlog Item | Add Assembly Resolver in Cloud Gateway |
| 81851 | CA Gateway - Cloud Gateway | Product Backlog Item | Convert Cloud Gateway MSI to WiX 5+ |
| 72349 | CA Gateway - DCOM AnyGateway | Product Backlog Item | AnyGateway DCOM package updates |
| 79050 | CA Gateway - DCOM AnyGateway | Product Backlog Item | Windows Cloud Gateway Package Updates |
| 81128 | CA Gateway - DCOM AnyGateway | Product Backlog Item | Add Assembly Resolver in AnyGateway DCOM |
| 81204 | CA Gateway - DCOM AnyGateway | Product Backlog Item | Convert AnyGateway DCOM MSI to WiX 5+ |
| 81589 | CA Gateway - DCOM AnyGateway | Product Backlog Item | Cleanup AnyCA DCOM |
| 63596 | CA Gateway - DCOM AnyGateway | Feature | Cleanup AnyCA DCOM |
| 82430 | CA Gateway - HTTPS AnyGateway | Product Backlog Item | Update packages in AnyCA Gateway REST |
| 85206 | CA Gateway - HTTPS AnyGateway | Product Backlog Item | Address package vulnerabilities in AnyCA Gateway REST |
| 80276 | CA Gateway - HTTPS AnyGateway | Bug | PUT/Config/DomainValidation/{Id} - The DomainValidatorType property should not exist on the request object |
| 80292 | CA Gateway - HTTPS AnyGateway | Bug | REST Gateway Swagger Implementation of GET/DELETE /config/configuration/logicalName Builds URL Incorrectly |
| 80507 | CA Gateway - HTTPS AnyGateway | Bug | AnyCA Gateway REST incorrectly breaking on commas in SANs for SANs passed via ExtensionData |
| 80511 | CA Gateway - HTTPS AnyGateway | Bug | REST Gateway Swagger in Container Lacks Servers Setting for Full URL |
| 80556 | CA Gateway - HTTPS AnyGateway | Bug | REST Gateway POST/PUT /config/certificateprofile, Other Examples in Swagger Contain Incorrect Parameter Names |
| 80604 | CA Gateway - HTTPS AnyGateway | Bug | Unused properties in Gateway /Config/CertificateProfile endpoint |
| 83785 | CA Gateway - HTTPS AnyGateway | Bug | Object reference error when "Sort" field not provided to v2/certificatesearch Gateway endpoint |
| 83870 | CA Gateway - HTTPS AnyGateway | Bug | AnyCA Gateway REST has runtime-named folders |
| 84147 | CA Gateway - HTTPS AnyGateway | Bug | Cleanup dotnet built-in stdout logging in Anygateway REST container logs |
| 76601 | CA Gateway - Windows Enrollment Gateway | Product Backlog Item | Windows Enrollment Gateway Uses Enrollment Patterns |
| 78676 | CA Gateway - Windows Enrollment Gateway | Product Backlog Item | Windows Enrollment Gateway Package Updates |
| 81198 | CA Gateway - Windows Enrollment Gateway | Product Backlog Item | Add Assembly Resolver in Windows Enrollment Gateway |
| 81852 | CA Gateway - Windows Enrollment Gateway | Product Backlog Item | Convert Windows Enrollment Gateway MSI to WiX 5+ |
| 82244 | CA Gateway - Windows Enrollment Gateway | Bug | Windows Enrollment Gateway Sync Service Not Logging |
| 105237 | CA Gateway - Windows Enrollment Gateway | Bug | Windows Enrollment Gateway using workflow ID instead of DisplayName for key check |
| 81428 | Certificate Authorities | Product Backlog Item | Remove EF from CAHealthChecker |
| 81431 | Certificate Authorities | Product Backlog Item | Remove EF from CASyncDynamicJobLookup |
| 81433 | Certificate Authorities | Product Backlog Item | Remove EF from CASynchronizationManager |
| 81435 | Certificate Authorities | Product Backlog Item | Remove EF from CAThresholdAlertManager |
| 80122 | Certificate Authorities | Feature | Improved Trusted Root Searchability |
| 81029 | Certificate Authorities | Feature | 3rd Party Trusted Roots Sync Job - 26.2.1 Copy |
| 83877 | Certificate Authorities | Feature | Minor Updates to Trust Bundle Button Names |
| 81841 | Certificate Authorities | Bug | Certificate Authority Sync not occuring |
| 82414 | Certificate Authorities | Bug | CA explicit credentials cannot be saved |
| 88052 | Certificate Collections | Product Backlog Item | Modify GET /CertificateCollections to support excludeUserSpecificCollections flag |
| 78268 | Certificate Collections | Feature | Enhanced CSV Export Functionality |
| 65614 | Certificate Enrollment | Product Backlog Item | KeyfactorAPI - Update PFX/CSR my context api endpoints to use Enrollment Patterns |
| 80977 | Certificate Enrollment | Product Backlog Item | Implement PFX/CSR my context api endpoints in PFX/CSR pages |
| 66222 | Certificate Enrollment | Feature | Enrollment ~/Context/My endpoints need updated to include Enrollment Patterns |
| 80197 | Certificate Enrollment | Bug | Reenrollment Job Schedule Displays as Immediate Instead of Configured Date/Time After ODKG Enrollment |
| 81481 | Certificate Enrollment | Bug | “Enrollment Pattern Default Owner Role” is incorrectly validated for Certificate Ownership when policy is set to Optional |
| 81744 | Certificate Enrollment | Bug | React Error Displayed on CSR Enrollment Page |
| 82433 | Certificate Enrollment | Bug | Enrollment - CA Autoselect Will Periodically Choose Unreachable CA |
| 84041 | Certificate Enrollment | Bug | PFX Enrollment Fails When Installing into Certificate Store |
| 84069 | Certificate Enrollment | Bug | Renew with CSR Configuration Got REACT_ERROR |
| 84312 | Certificate Enrollment | Bug | Cannot Schedule Add to Store Job |
| 84539 | Certificate Enrollment | Bug | Agent Id is Ignored when Provided to ODKG |
| 84558 | Certificate Enrollment | Bug | Certificate information is not automatically populated when manually renewing a certificate |
| 84760 | Certificate Enrollment | Bug | GET /Enrollment/CSR/Context/My & PFX Not Returning Values in ExtendedKeyUsages for Templates or EnrollmentPatterns |
| 84990 | Certificate Enrollment | Bug | GET /Enrollment/CSR/Context/My & PFX does not include non-default EPs |
| 87704 | Certificate Enrollment | Bug | CSR + PFX Enrollment Not Properly Displaying All Enrollment Patterns |
| 89862 | Certificate Enrollment | Bug | Error appears for a split second on enrollment pages |
| 91064 | Certificate Enrollment | Bug | POST/Enrollment/PFX/Deploy - The system return status code 500 when submitting request with valid RequestId |
| 81157 | Certificate Metadata | Bug | Cannot save metadata on certificates with multiple choice metadata type |
| 79835 | Certificate Operations | Product Backlog Item | Add Optional SANs and Location Count Columns to CSV Exports |
| 79836 | Certificate Operations | Product Backlog Item | Add Optional Metadata Columns to CSV Exports |
| 79838 | Certificate Operations | Product Backlog Item | Enhanced CSV Export UI Changes |
| 80504 | Certificate Operations | Product Backlog Item | Cert Store job schedules are created appropriately. |
| 81873 | Certificate Operations | Product Backlog Item | CSV Export Update Lifespan column to include the Days unit |
| 81874 | Certificate Operations | Product Backlog Item | CSV Export SANs column includes SAN type |
| 82214 | Certificate Operations | Product Backlog Item | Prevent Table Scans in Backfill Job |
| 82218 | Certificate Operations | Product Backlog Item | Limit Backfill Job Batch Size |
| 83832 | Certificate Operations | Product Backlog Item | Remove IncludeLocationCount from API & UI |
| 83953 | Certificate Operations | Product Backlog Item | SignatureStrengthCategory Query Parser Created |
| 81807 | Certificate Operations | Bug | Approvals can fail with object reference error |
| 89020 | Certificate Operations | Bug | Failure Denying Pending Certificate Request |
| 81407 | Certificate Search | Bug | Certificate root selection on add to cert store dialog extends the dialog height |
| 75708 | Certificate Stores | Product Backlog Item | Reenrollment Job - Utilize Denormalized Table |
| 75709 | Certificate Stores | Product Backlog Item | Discovery Job - Utilize Denormalized Table |
| 80778 | Certificate Stores | Product Backlog Item | Bulk Add to Certificate Store |
| 80779 | Certificate Stores | Product Backlog Item | Improve Trust Bundle Certificate Filtering |
| 80909 | Certificate Stores | Product Backlog Item | Certificate Basic Constraints Backfill Job |
| 81412 | Certificate Stores | Product Backlog Item | Bulk Remove from Certificate Store |
| 82027 | Certificate Stores | Product Backlog Item | Supporting PFX Format for selecting root CAs for management jobs |
| 82335 | Certificate Stores | Product Backlog Item | Discover stores jobs can be scheduled by pool |
| 80194 | Certificate Stores | Feature | Improve Job Creation Performance |
| 81222 | Certificate Stores | Feature | Support PFX Certificate Format for Selecting Root CAs for Certificate Store Management Jobs |
| 55288 | Certificate Stores | Bug | Cert Store Type's Depends On field grows too large when other field has a large name |
| 55425 | Certificate Stores | Bug | CertificateStores - User can see containers they do not have proper Granular Permission in the UI. |
| 58224 | Certificate Stores | Bug | Blueprint Includes Historical Discovery Jobs |
| 79198 | Certificate Stores | Bug | Create Cert Store with Explicit Inventory Schedule Will Schedule Two Inventory Jobs |
| 80688 | Certificate Stores | Bug | Remove the validation to have a default value when a custom field is required |
| 81101 | Certificate Stores | Bug | Creation of Store Fails When ‘Requires Store Password’ Is Enabled |
| 83816 | Certificate Stores | Bug | Cannot Remove Cert from Certificate Store if Cert Having Chain in the Store |
| 84192 | Certificate Stores | Bug | Incorrect Error Message Around Orchestrators |
| 84194 | Certificate Stores | Bug | Portal - Update the Discovery Job Creation API request by the portal to not include the Schedule request field |
| 84499 | Certificate Stores | Bug | Nullable Object Error on Loading Certificate Stores Page |
| 84554 | Certificate Stores | Bug | POST/CertificateStores/Approve - The system return 500 when submit request with valid data |
| 85455 | Certificate Stores | Bug | [Container] POST/CertificateStores/Certificates/Add - Can't add Certificate to CertificateStore, system return status 500 |
| 87390 | Certificate Stores | Bug | Cert Store Inventory Job Not Run After Cert Store Management Job |
| 87855 | Certificate Stores | Bug | Short Cert Store Inventory Interval contributes to duplicate Management jobs for Trust Bundle Mirroring |
| 89461 | Certificate Stores | Bug | Unable to create a Cert Store when No Value checked for Store Password |
| 90221 | Certificate Stores | Bug | Multiple errors when changing Cert Store V1 UO assigned at creation to a different V1 UO |
| 91082 | Certificate Stores | Bug | Error in Cert Store Job if Different Cert Store Types have Same Property Name but Different Data Type |
| 76298 | Certificate Templates | Product Backlog Item | EKU Details Field added to Templates Page |
| 77161 | Certificate Templates | Product Backlog Item | Ephemeral Flag added to Template UI |
| 78607 | Certificate Templates | Product Backlog Item | EJBCA Profile Management submits only relevant section to Configdump |
| 80221 | Certificate Templates | Product Backlog Item | EJBCA Client Sync ignores certificates from Ephemeral templates |
| 80241 | Certificate Templates | Product Backlog Item | MSCA Client Sync ignores certificates from Ephemeral templates |
| 80242 | Certificate Templates | Product Backlog Item | Remote CA Client syncs supports skipping ephemeral templates |
| 80243 | Certificate Templates | Product Backlog Item | Direct CA Sync skips ephemeral templates |
| 80244 | Certificate Templates | Product Backlog Item | Command Sync skips ephemeral certificates |
| 83907 | Certificate Templates | Product Backlog Item | New isEphemeral Database Column added to Templates |
| 83908 | Certificate Templates | Product Backlog Item | Add IsEphemeral Property to GET/PUT Templates |
| 84478 | Certificate Templates | Product Backlog Item | Edit the Extended Key Usages to Only Show Display Name |
| 86533 | Certificate Templates | Product Backlog Item | Cleanup templates with "uncollapsed" template names during upgrade |
| 68249 | Certificate Templates | Feature | Template EKU Details Field |
| 76284 | Certificate Templates | Feature | Ability to mark templates as ephemeral |
| 78487 | Certificate Templates | Feature | EJBCA Profile Management submits only relevant section to Configdump |
| 79691 | Certificate Templates | Feature | Support CA Template Management from CA Connectors |
| 86527 | Certificate Templates | Feature | Cleanup templates with "uncollapsed" template names during upgrade |
| 69918 | Certificate Templates | Bug | Edit Certificate Template > Metadata Tab: Correct Typo |
| 78432 | Certificate Templates | Bug | Certificate Templates - User With Only /templates/read Permissions Cannot See VIEW ON CA Option On Page |
| 81664 | Certificate Templates | Bug | Unable to perform Edit On CA with template just created using Create On CA with EKU RFC9336 Document Signing |
| 82377 | Certificate Templates | Bug | EJBCA Certificates not associated with "collapsed" name template during CA sync |
| 81625 | Containers | Product Backlog Item | Command Container Build PDB Exclusion |
| 81627 | Containers | Product Backlog Item | UO Container Build PDB Exclusion |
| 81629 | Containers | Product Backlog Item | CA Connector Container Build PDB Exclusion |
| 82398 | Containers | Product Backlog Item | OTEL Added to Command as an optional feature |
| 83840 | Containers | Product Backlog Item | Command Helm Chart Support for the K8s Gateway API |
| 84303 | Containers | Product Backlog Item | AnyCA REST Helm Chart Support for the K8s Gateway API |
| 81624 | Containers | Feature | Container Builds Don't Include Debug Symbols |
| 82397 | Containers | Feature | Command OpenTelemetry Support for Metrics, Traces, and Structured Logging |
| 83839 | Containers | Feature | K8s Gateway API Support for Helm |
| 86092 | Containers | Bug | Missing NextGenUIProxy Application Setting Throws dbupgradetool Error During Command Helm Installation |
| 70140 | Dashboard | Product Backlog Item | Move Dashboard components and widgets into internal NPM package |
| 70317 | Dashboard | Product Backlog Item | Revocation Monitoring Grid Widget |
| 71887 | Dashboard | Product Backlog Item | Add support for Revocation Monitoring Grid Widget in the Add Panel |
| 80938 | Dashboard | Product Backlog Item | Analytics endpoint created to support revocation monitoring widget |
| 80939 | Dashboard | Product Backlog Item | Logi dashboard revocation monitoring settings are marked as legacy |
| 82203 | Dashboard | Product Backlog Item | Default Dashboard Config Dialog appears upon navigating to an empty dashboard |
| 83835 | Dashboard | Product Backlog Item | Default dashboard dialog does not block navigation to other pages |
| 71128 | Dashboard | Feature | Move Dashboard components into separate NPM package |
| 72271 | Dashboard | Feature | Add Revocation Monitoring Grid Widget to New Dashboard |
| 81947 | Dashboard | Feature | Dashboard Feedback: Move the default configuration dialog to on load of an empty dashboard |
| 82438 | Dashboard | Bug | [Analytics] Inconsistent between SQL query and Certificate Search Query |
| 86141 | Dashboard | Bug | Missing New Dashboard Navigation Link |
| 81323 | Data Layer | Product Backlog Item | App settings information should be moved from db table to constants |
| 81437 | Data Layer | Product Backlog Item | App settings information should be updated on app startup |
| 82213 | Data Layer | Product Backlog Item | App setting info should be updated on API startup |
| 70856 | Data Layer | Feature | EF Removal - Cleanup |
| 73055 | Data Layer | Feature | App Settings desired state configuration |
| 81813 | Data Layer | Bug | Possible duplicate index/constraint on CertificateQueryItems table |
| 84297 | Data Layer | Bug | [support].[usp_DeleteCertificateAuthority] Errors in 26.2 Alpha |
| 88264 | Data Layer | Bug | Workflow cleanup job scales poorly |
| 78793 | EJBCA Integration | Bug | EJBCA with OAuth Misleading Warning Message with Object Reference Error |
| 81838 | EJBCA Integration | Bug | EJBCA Test Harness SetTemplateDetails error parsing KeyUsage from GetTemplateDetails |
| 82452 | Enrollment Patterns | Product Backlog Item | Add Private Key Retention to Template Data |
| 74106 | Enrollment Patterns | Bug | ML-DSA Alternate Keys not filled in for System-wide Policies the same as SLH-DSA |
| 76683 | Enrollment Patterns | Bug | Error setting pattern policies if only some PQC algorithms are enabled |
| 81585 | Enrollment Patterns | Bug | Unable to update key sizes for an Enrollment Pattern |
| 83931 | Enrollment Patterns | Bug | Default owner role system wide settings override enrollment pattern when pattern has blank value |
| 84293 | Identity Providers | Bug | Unable to Validate Discovery Document where Issuer does not have a Trailing '/' - AnyCA Gateway REST |
| 76929 | Installation | Product Backlog Item | Remove EF Connection String from InstallerContextModel |
| 82154 | Installation | Product Backlog Item | Rework "check" flag for dbupgradetool |
| 84818 | Installation | Product Backlog Item | Always use provided license when using database upgrade tool |
| 84917 | Installation | Product Backlog Item | Add Next-Gen UI proxy to the MSI installer and configuration wizard |
| 72410 | Installation | Feature | Convert Remaining MSI projects to WiX 5+ |
| 81030 | Installation | Feature | Command Upgrade to work with Orchestrator Pooling - 26.2.1 Copy |
| 82252 | Installation | Bug | Duplicate Key Error in Upgrade Module SeedV1OrchestratorPools |
| 83805 | Installation | Bug | MSI Uninstaller does not remove IIS Virtual Directories |
| 84242 | Installation | Bug | Database Upgrade Tool Outputs Sql Retry Error Despite Configured Retry Settings |
| 84256 | Installation | Bug | Upgrade Script AgentSchedules_TypeUpdate is Not Rerunable |
| 84815 | Installation | Bug | Configuration does not save session expiration and cookie expiration values |
| 84892 | Installation | Bug | KeyGen error with config wizard on upgrade when ODKG values are filled in from saved config |
| 89659 | Installation | Bug | Command upgrade script Templates_CleanupCollapsibleNameStubTemplates failing |
| 89661 | Installation | Bug | Upgrade from 25.4.3 -> 26.2.1 fails |
| 105272 | Installation | Bug | Roles with system settings permissions are invalidated on upgrade |
| 82418 | Logging | Bug | Command Logs not honoring archive file limit |
| 82422 | Logging | Bug | Certificate Cleanup Job Removes Expired Certificate but Reports 0 Cleaned in Logs |
| 81583 | Management Portal | Product Backlog Item | Integrate New Command Portal into Platform-Command Repo |
| 81986 | Management Portal | Product Backlog Item | Basic Deployment of new Portal |
| 82390 | Management Portal | Product Backlog Item | Restrict SPA Portal Access with application setting |
| 82391 | Management Portal | Product Backlog Item | Migrate ClaimsProxy into the WebConsole |
| 82577 | Management Portal | Product Backlog Item | Create React-Analytics base package |
| 84111 | Management Portal | Product Backlog Item | EF - SMTP |
| 84326 | Management Portal | Product Backlog Item | Globalize React-Analytics Strings |
| 84405 | Management Portal | Product Backlog Item | Remove next-generation portal from 26.2.1 |
| 84545 | Management Portal | Product Backlog Item | Trust Store UI Modifications |
| 80441 | Management Portal | Feature | Trust Store Feedback |
| 84138 | Management Portal | Bug | Large tokens cause 502 in helm deployments |
| 84918 | Next Gen UI | Product Backlog Item | Add Next-Gen UI Proxy to the Kubernetes deployment |
| 84921 | Next Gen UI | Product Backlog Item | Add Next-Gen UI to Helm deployment |
| 84922 | Next Gen UI | Product Backlog Item | Update the Next-Gen UI Dashboard page to use the React/Analytics Dashboard |
| 84923 | Next Gen UI | Product Backlog Item | Update the Next-Gen UI Reports page to use the React/Analytics Reports |
| 85720 | Next Gen UI | Product Backlog Item | CSR Generation + CSR Enrollment Next-Gen UI |
| 86213 | Next Gen UI | Product Backlog Item | PFX Enrollment |
| 87143 | Next Gen UI | Product Backlog Item | Apply 26.2.1 Workflow Updates to Next-Gen UI |
| 87221 | Next Gen UI | Product Backlog Item | Rename Next-Gen UI and Next-Gen UI Proxy |
| 87222 | Next Gen UI | Product Backlog Item | Update Logged in user information |
| 87223 | Next Gen UI | Product Backlog Item | Display full Command version in banner |
| 87258 | Next Gen UI | Product Backlog Item | Create the Workflows Instances page |
| 88116 | Next Gen UI | Product Backlog Item | CSR Generation Updated to Use Steps |
| 88117 | Next Gen UI | Product Backlog Item | CSR Enrollment Updated to Use Steps |
| 88716 | Next Gen UI | Product Backlog Item | ODKG Enrollment |
| 89018 | Next Gen UI | Product Backlog Item | Update alert pages to use new API endpoints |
| 89019 | Next Gen UI | Product Backlog Item | Restyle Next-Gen UI Analytics |
| 89682 | Next Gen UI | Product Backlog Item | Initial Setting pages creation |
| 89842 | Next Gen UI | Product Backlog Item | Naviagtion bar security trimming |
| 89854 | Next Gen UI | Product Backlog Item | Next-Gen UI/UX Adjustments |
| 81480 | Next Gen UI | Feature | Integrate New Command Portal |
| 81545 | Next Gen UI | Feature | Next-Gen UI Authentication |
| 84911 | Next Gen UI | Feature | Next-Gen UI Installation |
| 84916 | Next Gen UI | Feature | Next-Gen UI Reporting |
| 85543 | Next Gen UI | Feature | Next-Gen UI Alerts |
| 85546 | Next Gen UI | Feature | Next-Gen UI Enrollment |
| 85552 | Next Gen UI | Feature | Next-Gen UI Workflows |
| 87288 | Next Gen UI | Feature | Implement Navigation Bar Security Trimming |
| 78462 | Orchestrator API | Product Backlog Item | Client Cert Auth for PooledSession/Register |
| 78463 | Orchestrator API | Product Backlog Item | Auto Registration for PooledSession/Register |
| 78498 | Orchestrator API | Product Backlog Item | validate capabilities are not in use when updating orchestrator pool |
| 78499 | Orchestrator API | Product Backlog Item | Job Scheduling Algorithm Implementation |
| 78501 | Orchestrator API | Product Backlog Item | Update Orchestrator Approval to Require Pool |
| 78570 | Orchestrator API | Product Backlog Item | Consolidate Register and PooledRegister Code |
| 79264 | Orchestrator API | Product Backlog Item | Update AgentJobStatus Record During Configure |
| 79276 | Orchestrator API | Product Backlog Item | Utilize Orchestrator Pooling for Custom Jobs |
| 79825 | Orchestrator API | Product Backlog Item | Extension Point for Job Scheduling Algorithm |
| 80783 | Orchestrator API | Product Backlog Item | Minimize SQL or otherwise optimizing calls made during Agent/Orchestrator Approval |
| 81338 | Orchestrator API | Product Backlog Item | Update Capability Model in PooledSessionRegister Contract |
| 81510 | Orchestrator API | Product Backlog Item | Optimize Orchestrator approval SQL check for duplicates |
| 81792 | Orchestrator API | Product Backlog Item | Update Agent Jobs Query Builder to work with Orchestrator Pools |
| 81835 | Orchestrator API | Product Backlog Item | Unit Testing for Scheduling |
| 82247 | Orchestrator API | Product Backlog Item | Ensure Orchestrator Is Still In Pool When Calling Configure Endpoints |
| 82479 | Orchestrator API | Product Backlog Item | Make Pool Job Scheduler Package Self Contained |
| 81031 | Orchestrator API | Feature | Command Registration Updates - 26.2.1 Copy |
| 81069 | Orchestrator API | Feature | Reauthor Orchestrator PooledSessionRegister Contract to Enable Extensibility |
| 48479 | Orchestrator API | Bug | Post/OrchestratorJobs/Reschedule - Status code returns 204 even Query has not any JobId |
| 62292 | Orchestrator API | Bug | [KeyfactorAgents] POST /CustomJob/Submit Missing validation for SessionToken |
| 62518 | Orchestrator API | Bug | [KeyfactorAgents] POST \CustomJob\Complete Missing validation for JobHistoryId |
| 71696 | Orchestrator API | Bug | Client Cert Auth Revoke Previous Certificate Operation Does Not Work |
| 79328 | Orchestrator API | Bug | Job Not Found Endpoint Returns 401 Error |
| 83932 | Orchestrator API | Bug | Orchestrator jobs that end with 'CompletedWillRetry' are not retried |
| 84251 | Orchestrator API | Bug | Remove references to checking the log from error messages |
| 84252 | Orchestrator API | Bug | PooledSession/Register Log messages are confusing |
| 84340 | Orchestrator API | Bug | Multiple jobs completing at the same time gives deadlock error |
| 84792 | Orchestrator API | Bug | /PemInventory/Configure endpoint isn't returning correct Submit endpoint |
| 84855 | Orchestrator API | Bug | Missing Index on [cms_agents].[JobFields] |
| 85645 | Orchestrator API | Bug | Command Orchestrator API displays excessive warning logs about UO capabilities |
| 87047 | Orchestrator API | Bug | Object Reference Error on Pooled Sessions Register with AutoRegistrationPoolId if Orchestrator Previously Removed from a Pool |
| 89675 | Orchestrator API | Bug | ~/Agents/Approve API Can Approve V2 Orchestrator Without A Pool |
| 78176 | Orchestrator Management | Product Backlog Item | Restrict Orchestrator Pool Deletion |
| 78546 | Orchestrator Management | Product Backlog Item | Add an Add/Edit Page for Orchestrator Pools |
| 80542 | Orchestrator Management | Product Backlog Item | Update Orchestrator approval UI to allow user to give pool |
| 80781 | Orchestrator Management | Product Backlog Item | On orchestrator status reset, remove orchestrators from any v2 pools they're already in |
| 80923 | Orchestrator Management | Product Backlog Item | Revise orchestrator approval to be done in batches |
| 81413 | Orchestrator Management | Product Backlog Item | Modify PUT /OrchestratorPools/{id}/Orchestrators to add orchestrators incrementally |
| 81414 | Orchestrator Management | Product Backlog Item | Add DELETE /OrchestratorPools/{id}/Orchestrators to remove orchestrators incrementally |
| 81505 | Orchestrator Management | Product Backlog Item | Remove dependency between Agent and Orchestrator Pool services |
| 81648 | Orchestrator Management | Product Backlog Item | Implement orchestrator add/remove for orchestrator pools |
| 82351 | Orchestrator Management | Product Backlog Item | Remove Mac Enrollment from Command |
| 84614 | Orchestrator Management | Product Backlog Item | Signoff Feedback API and UI Changes for Orchestrator Pool Management |
| 89701 | Orchestrator Management | Product Backlog Item | Add Orchestrator Auto Registration AuthZ Logging |
| 58736 | Orchestrator Management | Feature | Remove Mac Autoenrollment from Command |
| 81032 | Orchestrator Management | Feature | Scheduling and Running Pooled Jobs - 26.2.1 Copy |
| 81033 | Orchestrator Management | Feature | Orchestrator Pool Entities in Command - 26.2.1 Copy |
| 89665 | Orchestrator Management | Feature | Add Orchestrator Auto Registration AuthZ Logging |
| 71005 | Orchestrator Management | Bug | Orchestrator Scheduled Jobs query by TargetPath only returns Inventory Jobs |
| 80107 | Orchestrator Management | Bug | Resetting an Agent Does Not Always Work |
| 80212 | Orchestrator Management | Bug | Blueprint Scheduled Jobs Tab Does Not Display Schedule; applying blueprint to another orchestrator fails with generic UI error |
| 81199 | Orchestrator Management | Bug | POST/OrchestratorPools - System should return status 400 when user enter LastSeenThreshold less than 10 minutes. |
| 81666 | Orchestrator Management | Bug | Last Seen Value on Orchestrator Management Doesn't Update with Each Session Register |
| 82504 | Orchestrator Management | Bug | Misspelled Text in Orchestrator Pool Management Tab |
| 84030 | Orchestrator Management | Bug | Unable to Select a v1 Pool when Creating/Editing a Certificate Store |
| 84035 | Orchestrator Management | Bug | Error on Disapprove Orchestrator Action |
| 84198 | Orchestrator Management | Bug | Adding all Capabilities for a Store Type is Tedious |
| 84214 | Orchestrator Management | Bug | Upgraded orchestrator pool names are different from newly registered pool names for v1 pools |
| 84216 | Orchestrator Management | Bug | Searching Scheduled Orchestrator Jobs by OrchestratorPoolName returns only 1 result |
| 84334 | Orchestrator Management | Bug | Modifying capabilities of a v2 pool with an orchestrator in it running non-pooled jobs fails due to 'removal of non-pooled capabilities' |
| 84412 | Orchestrator Management | Bug | Unable to Delete a Non-Poolable Orchestrator |
| 84456 | Orchestrator Management | Bug | Error Occurs When Attempting to Unschedule a Management Job or Update an Inventory Schedule |
| 84785 | Orchestrator Management | Bug | [cms_agents].[CertStoreJobs] Table Cleared on CompletedWillRetry and Prevents Job Reschedule |
| 85805 | Orchestrator Management | Bug | View Certificate Stores from Orchestrator Management Does Not Limit Certificate Store Display |
| 88039 | Orchestrator Management | Bug | Pool Capabilities Grid Can Not Display Pool Capabilities if Job Type More Than 50 |
| 89666 | Orchestrator Management | Bug | No Target Showed for Management Job in Scheduled Jobs Grid |
| 89673 | Orchestrator Management | Bug | Incorrect v1 example shown for v2 POST /Agents/Approve endpoint on Swagger |
| 89679 | Orchestrator Management | Bug | "High Availability" Orchestrator column name is not the most accurate |
| 64889 | Orchestrators | Product Backlog Item | Move AgentsDataManager.StoreTypeCapabilities to AgentService |
| 66066 | Orchestrators | Product Backlog Item | Remove ICertificateStoreRetriever in favor of ICertificateDataStore |
| 76874 | Orchestrators | Product Backlog Item | cms_agents.CertStores references OrchestratorPool instead of AgentId (database changes only) |
| 76875 | Orchestrators | Product Backlog Item | Add Validation to Prevent Creating Blueprint for Pooled Agent |
| 79873 | Orchestrators | Product Backlog Item | Rename `DynamicRegistrationPoolId` parameter |
| 80743 | Orchestrators | Product Backlog Item | Make AutoRegistrationPoolId a constant in Orchestrators.Common |
| 81332 | Orchestrators | Product Backlog Item | Remove the Ability for Scheduling to Ignore Return Limit |
| 81339 | Orchestrators | Product Backlog Item | v26 Orchestrator Use New Contract Model for PooledSession/Register Endpoint |
| 81653 | Orchestrators | Product Backlog Item | Cert stores UI references orchestrator pool instead of agent |
| 81655 | Orchestrators | Product Backlog Item | cms_agents.CertStores references OrchestratorPool |
| 81966 | Orchestrators | Product Backlog Item | EF- Agent Blueprint Service |
| 81969 | Orchestrators | Product Backlog Item | EF - Agent Controller |
| 81970 | Orchestrators | Product Backlog Item | EF - Agent Job Status Alert |
| 81971 | Orchestrators | Product Backlog Item | EF - Agent Pools |
| 82334 | Orchestrators | Product Backlog Item | JobService refactor |
| 82393 | Orchestrators | Product Backlog Item | Update packages in UO |
| 83882 | Orchestrators | Product Backlog Item | Allow UO container to install more than 1 replica |
| 84244 | Orchestrators | Product Backlog Item | Add columns to Orchestrator Management grid: 'High Availability' & 'Orchestrator Pool' |
| 84581 | Orchestrators | Product Backlog Item | Disallow custom a custom name when requesting more than 1 replica |
| 91801 | Orchestrators | Product Backlog Item | Update Packages - 26.2.1 - UO |
| 105335 | Orchestrators | Product Backlog Item | Universal orchestrator should not be upgradeable - Windows |
| 105336 | Orchestrators | Product Backlog Item | Universal orchestrator should not be upgradeable - Linux |
| 81034 | Orchestrators | Feature | Orchestrator Updates For Pooling - 26.2.1 Copy |
| 81805 | Orchestrators | Feature | Orchestrator Technical Debt |
| 83881 | Orchestrators | Feature | Allow Universal Orchestrator replicas in helm |
| 91800 | Orchestrators | Feature | 26.2.1 UO Package Updates |
| 80063 | Orchestrators | Bug | Orchestrator Frequently Requests Excessive Access Tokens |
| 81509 | Orchestrators | Bug | 26.2 UO Installer Error: ‘RegistrationUpdaters’ Path Not Found |
| 82282 | Orchestrators | Bug | Post/OrchestratorJobs/Reschedule - Returns 500 error when trying to reschedule a failed job |
| 83912 | Orchestrators | Bug | Orchestrator Custom Jobs do not complete nor run after first time |
| 83947 | Orchestrators | Bug | GET OrchestratorJobs/ScheduledJobs - Error 500 after navigating via "View Jobs" button on Management page |
| 84013 | Orchestrators | Bug | Orchestrator pooled job results still accepted for timed out / failed pooled jobs |
| 84065 | Orchestrators | Bug | CA syncs with UO v26.2.1 do not complete |
| 84319 | Orchestrators | Bug | 25.2 Orchestrator cannot connect to /Complete endpoint to complete job after upgrade until re-installed for some jobs |
| 87231 | Orchestrators | Bug | UO installation issues with install.ps1 script on Windows |
| 89776 | Orchestrators | Bug | Management Job not Running after Approving Pending Request |
| 85718 | Post Quantum | Product Backlog Item | Command reads ML-DSA templates correctly from AD |
| 85691 | Post Quantum | Feature | DCOM CA ML-DSA support |
| 81054 | Remote CA Management | Product Backlog Item | Correlation Token is passed from Command to the CA Connector Client when running jobs |
| 81602 | Remote CA Management | Product Backlog Item | Add support for GetTemplateDetails and SetTemplateDetails from CA Connectors |
| 81987 | Remote CA Management | Product Backlog Item | Correlation Token is passed from CA Connector Client to CA Connector API when available |
| 82429 | Remote CA Management | Product Backlog Item | Update packages in Remote CA Connector |
| 83948 | Remote CA Management | Product Backlog Item | Add support for Get/Create/Edit Certificate Extensions from CA Connectors |
| 81049 | Remote CA Management | Feature | Remote CA Connector & CA Connector API pass and log correlation tokens |
| 78215 | Remote CA Management | Bug | Remote CA Connector not passing correlation token to REST Gateway |
| 81959 | Remote CA Management | Bug | Error in Generating Orchestrator Blueprint When Discovery Jobs Scheduled |
| 73789 | Reporting | Product Backlog Item | Certificates by Signature Strength - Report Widget |
| 73792 | Reporting | Product Backlog Item | Active Certificates By Signing Algorithm - Report Widget |
| 73798 | Reporting | Product Backlog Item | Deprecated Signing Algorithms - Report Widget |
| 77470 | Reporting | Product Backlog Item | Text Entry Report Widget |
| 78270 | Reporting | Product Backlog Item | Add Additional Certificate Details to CSV Export |
| 78526 | Reporting | Product Backlog Item | Header Report Widget |
| 83976 | Reporting | Product Backlog Item | Update Deprecated Signing Algorithms Widget to use SignatureStrengthCategory query parser |
| 84501 | Reporting | Product Backlog Item | Update Certificates by Signing Algorithm Combo Icon |
| 78521 | Reporting | Feature | Report Widgets - PKI Status for Collection - Part I |
| 83723 | Reporting | Bug | Legacy Report Help Icon link to Docs |
| 85261 | Reporting | Bug | Scheduled reports using collection fail after the first run with sessionId error (26.2.1) |
| 85403 | Reporting | Bug | GET /reports/{reportId} returns a 'ReportInstanceId' |
| 81853 | SCEP | Product Backlog Item | Convert SCEP MSI to WiX 5+ |
| 82328 | SCEP | Product Backlog Item | SCEP Package Updates |
| 80776 | Security | Product Backlog Item | Improved User Security Roles Mapping Cache Implementation |
| 81643 | Security | Product Backlog Item | SecurityRoles - API, update the PUT api endpoint to use a locking mechanism |
| 81644 | Security | Product Backlog Item | SecurityRoles - API, add new endpoint for adding a claim to an existing security role. |
| 81645 | Security | Product Backlog Item | SecurityRoles - API, add new endpoint for removing a claim from an existing security role. |
| 82164 | Security | Product Backlog Item | SecurityRoles - API, concurrent protection updates requires retry logic |
| 84411 | Security | Product Backlog Item | Security Roles - Delete Claims Endpoint, remove Description as a requirement in the request |
| 84899 | Security | Product Backlog Item | Change Caching Policies to Absolute Expiration |
| 76182 | Security | Feature | Security Role API Concurrency Protections |
| 78744 | Security | Feature | Improved User Security Roles Mapping Cache |
| 81158 | Security | Bug | PermissionSecurables table not being indexed causes lengthy look ups |
| 84159 | Security | Bug | Inconsistent casing on claim values can invalidate security roles |
| 92174 | Security | Bug | PUT /Security/Roles/{id}/claims invalidates the role |
| 66071 | Services | Product Backlog Item | Move AgentsDataManager.CapabilityNames to JobService |
| 80156 | Services | Product Backlog Item | New orchestrator pool jobs timer service job to timeout jobs |
| 80189 | Services | Product Backlog Item | Start SyncTrustedRoot TimerService Job Immediately If Never Run Before |
| 81430 | Services | Product Backlog Item | EF - /Workflow/Certificates/Approve and CA sync of certificate requests |
| 81438 | Services | Product Backlog Item | EF SSL - /SSL/Networks/{id}/Reset |
| 81892 | Services | Product Backlog Item | EF - POST, PUT, DELETE /JobTypes/Custom |
| 81897 | Services | Product Backlog Item | EF - CustomJobType GET |
| 81926 | Services | Product Backlog Item | EF - Console alerts |
| 81948 | Services | Product Backlog Item | EF - Timer service |
| 81955 | Services | Product Backlog Item | EF - PFX enrollment |
| 81956 | Services | Product Backlog Item | EF - Agent Jobs (pooled) |
| 81958 | Services | Product Backlog Item | EF - Misc references |
| 82338 | Services | Product Backlog Item | EF - SSH |
| 83795 | Services | Product Backlog Item | EF - Agent Jobs (unpooled) |
| 83796 | Services | Product Backlog Item | EF - AgentService |
| 83901 | Services | Product Backlog Item | EF - Unit and integration tests |
| 84191 | Services | Product Backlog Item | EF Cleanup - IEFModels |
| 84193 | Services | Product Backlog Item | EF Cleanup - Remove EntityFramework project and models |
| 84401 | Services | Product Backlog Item | EF - Event Handler Registration |
| 70845 | Services | Feature | Agents EF Removal |
| 70846 | Services | Feature | CA EF Removal |
| 70849 | Services | Feature | SSH EF Removal |
| 70851 | Services | Feature | JobService EF Removal |
| 70852 | Services | Feature | WorkflowService EF Removal |
| 70855 | Services | Feature | Misc EF Removal |
| 83950 | Services | Bug | 3rd Party Trusted Roots Sync Should be Disabled by default |
| 84217 | Services | Bug | Orchestrators kicked out of pools are still approved |
| 89849 | Services | Bug | Error in Agent Notification Alert Execution |
| 71790 | SSL Management | Product Backlog Item | SSL Discovery/Monitoring - Configure |
| 71793 | SSL Management | Product Backlog Item | SSL Discovery/Monitoring - Complete |
| 76565 | SSL Management | Feature | Refactor SSL out of EF |
| 84311 | SSL Management | Bug | Deleting an SSL Pool with no orchestrators throws an error |
| 84310 | SSL Scanning | Bug | Cannot edit an SSL pool configured before upgrade to 26.2 |
| 84329 | SSL Scanning | Bug | SSL Pool Responses do not include all Orchestrators |
| 82442 | Uncategorized | Product Backlog Item | Update Nuget packages in Command |
| 78283 | Uncategorized | Feature | Rework "check" flag for dbupgradetool |
| 87888 | Uncategorized | Bug | Trust Bundles Page Lacks a Help Link |
| 80992 | Workflow | Product Backlog Item | Add warning log when using the deprecated SAN Token Parser |
| 81058 | Workflow | Product Backlog Item | Workflow - Workflow definitions with steps are updated to be cancellable |
| 81083 | Workflow | Product Backlog Item | Workflow - update non-enrollment/revocation nor renewal built-in workflow steps to be cancellable. |
| 81135 | Workflow | Product Backlog Item | Update WARN log message when using Deprecated SAN Token Parser |
| 76603 | Workflow | Feature | Non-Enrollment/Revocation/Renewal Workflow steps should be cancellable |
| 62273 | Workflow | Bug | Restarting failed workflow uses current state of previous workflow |
| 65059 | Workflow | Bug | Workflow instances cannot be queried by InitiatingUserName |
| 75540 | Workflow | Bug | Incorrect Field Labels in Error Messages and Tooltip in 'Invoke AWS Lambda Function' Workflow Step |
| 77464 | Workflow | Bug | Approval Workflow - Approval Fails With Issue On Sending Email Despite No Email Recipients Set |
| 79254 | Workflow | Bug | POST /Workflow/Definitions API returns Keys[0].DisplayName = null when creating a new Workflow Definition |
| 81988 | Workflow | Bug | AWS Lambda Step Fails to Save When Using Keyfactor Secrets for Access Key and Access Key Secret |
| 82220 | Workflow | Bug | Workflow with a disabled approval step results in infinite loop and hundreds of archived log files |
| 82224 | Workflow | Bug | Text on "Workflow Step Enabled" toggle changes - causes confusion |
| 90031 | Workflow | Bug | Workflows with status of Rejected are never cleaned up |
Was this page helpful? Provide Feedback