Incremental Release 9.8 Notes
April 2022
Updates and Improvements
-
PFX Generation
Consolidated PFX
A PFX file (personal information exchange format), also known as a PKCS#12 archive, is a single, password-protected certificate archive that contains both the public and matching private key and, optionally, the certificate chain. It is a common format for Windows servers. generation code so that the PFX files are generated identically from the enrollment Certificate enrollment refers to the process by which a user requests a digital certificate. The user must submit the request to a certificate authority (CA). and download components. -
SCEP Intune Integration
Keyfactor’s Simple Certificate Enrollment Protocol (SCEP) component has been updated to utilize the latest Intune API
A set of functions to allow creation of applications. Keyfactor offers the Keyfactor API, which allows third-party software to integrate with the advanced certificate enrollment and management features of Keyfactor Command.: Microsoft Authentication Library (MSAL) and Azure AD Graph API. -
Pending Certificate Request SAN
Fixed an issue in which pending certificate requests containing a User Principal Name (UPN) in the Subject Alternative Name
The subject alternative name (SAN) is an extension to the X.509 specification that allows you to specify additional values when enrolling for a digital certificate. A variety of SAN formats are supported, with DNS name being the most common. (SAN The subject alternative name (SAN) is an extension to the X.509 specification that allows you to specify additional values when enrolling for a digital certificate. A variety of SAN formats are supported, with DNS name being the most common.) would be prefixed with ‘[0]’, and IPv6 addresses were not displayed. -
vSCEP Challenge Error
Fixed an issue in which attempting to obtain a Validated SCEP (vSCEP) challenge resulted in an assembly loading error.
-
Denied Alert Email SAN
Fixed an issue in which Denied Certificate Alert email did not contain the certificate Subject Alternative Names (SANs).
-
Expiration Alert Logging
Fixed an issue in which excessive and superfluous log messages were generated during Expiration Alert processing.
The Keyfactor Universal Orchestrator, one of Keyfactor's suite of orchestrators, is used to interact with Windows servers (a.k.a. IIS certificate stores) and FTP capable devices for certificate management, run SSL discovery and management tasks, and manage synchronization of certificate authorities in remote forests. With the addition of custom extensions, it can run custom jobs to provide certificate management capabilities on a variety of platforms and devices (e.g. F5 devices, NetScaler devices, Amazon Web Services (AWS) resources) and execute tasks outside the standard list of certificate management functions. It runs on either Windows or Linux. in this release, as such the 9.5 version of the Universal Orchestrator Keyfactor orchestrators perform a variety of functions, including managing certificate stores and SSH key stores. should still be considered the latest and is fully compatible with the Keyfactor Command 9.8 release.API Endpoint Change Log
No API endpoint An endpoint is a URL that enables the API to gain access to resources on a server. changes were made in this release.
