May 2022
New Features
Metadata Access on View Inventory Dialog
-
What problem does it solve?
The View Inventory dialog for certificate stores previously displayed each certificate found in the certificate store but did not include the Keyfactor Command metadata
Metadata provides information about a piece of data. It is used to summarize basic information about data, which can make working with the data easier. In the context of Keyfactor Command, the certificate metadata feature allows you to create custom metadata fields that allow you to tag certificates with tracking information about certificates. field values configured for the certificates. -
How does it work?
The View Inventory dialog on the Certificate Stores page now includes a Metadata section to allow you to view the metadata fields configured in Keyfactor Command for each certificate found in the certificate store.
-
What’s the benefit?
Streamlining: You no longer need to look up the metadata fields for the certificates separately.
Updates and Improvements
-
GET /Agents Keyfactor API Endpoint
The GET /Agents Keyfactor API
A set of functions to allow creation of applications. Keyfactor offers the Keyfactor API, which allows third-party software to integrate with the advanced certificate enrollment and management features of Keyfactor Command. endpoint An endpoint is a URL that enables the API to gain access to resources on a server. now includes a query parser to allow searching by AgentId. For example:.AgentId -eq "d2f0d545-c3b3-4ea3-bc0a-0232865e24c3" -
Logging
Changes have been made to the way that Keyfactor Command logs are initialized to support logging from multiple source libraries including Quartz.
-
Alerts Do Not Resume After a Database Connection Failure
Fixed an issue in which expiration alerts and pending, issued, and denied certificate alerts that failed due to a database connection problem would not restart on resolution of the database connection issues until the Keyfactor Command service was restarted.
-
Revoke All of Entirely Revoked or Expired Certificates Fails
Fixed an issue in which attempting to revoke all for a group of certificates that contains only certificates that are revoked already and/or expired results in an error message.
-
SSH Server Groups Incompatible with Domain Names Containing Hyphens
Fixed an issue in which SSH
The SSH (secure shell) protocol provides for secure connections between computers. It provides several options for authentication, including public key, and protects the communications with strong encryption. server groups could not be created in environments where the Keyfactor Command domain contains a hyphen because the SSH server group owner field would not support a hyphen in the domain name. -
Certificate Signing Requests Can Produce an Error on Decoding
Fixed an issue in which CSR
A CSR or certificate signing request is a block of encoded text that is submitted to a CA when enrolling for a certificate. When you generate a CSR within Keyfactor Command, the matching private key for it is stored in Keyfactor Command in encrypted format and will be married with the certificate once returned from the CA. decoder used in CSR enrollment Certificate enrollment refers to the process by which a user requests a digital certificate. The user must submit the request to a certificate authority (CA). can produce an error on decoding the CSR under select circumstances. These can include SCEP requests with no SANs and CSRs with no extensions. -
Keyfactor API GET Requests with a Sort Produce a 500 Error
Fixed an issue in which Keyfactor API GET endpoints that support query sorting in the URL would produce a 500 error if the sort field was not provided correctly (e.g. the fieldname was entered with a space or was a valid fieldname but not one that was supported for sorting).
The Keyfactor Universal Orchestrator, one of Keyfactor's suite of orchestrators, is used to interact with servers and devices for certificate management, run SSL discovery and management tasks, and manage synchronization of certificate authorities in remote forests. With the addition of custom extensions, it can provide certificate management capabilities on a variety of platforms and devices (e.g. Amazon Web Services (AWS) resources, Citrix\NetScaler devices, F5 devices, IIS stores, JKS keystores, PEM stores, and PKCS#12 stores) and execute tasks outside the standard list of certificate management functions. It runs on either Windows or Linux servers or Linux containers. in this release, as such the 9.5 version of the Universal Orchestrator Keyfactor orchestrators perform a variety of functions, including managing certificate stores and SSH key stores. should still be considered the latest and is fully compatible with the Keyfactor Command 9.9 release.API Endpoint Change Log
The following changes were made to the API endpoints. Please review these carefully if you have implemented any integration using these endpoints.
Table 838: API Change Log
| Endpoint | Methods | Action | Notes |
|---|---|---|---|
| /Reports/<any> | GET | Fix | Spaces within the sortField no longer results in an exception. |
| /Reports/{id}/Schedules | GET | Fix | An invalid sortField no longer results in an exception. |
| /Agents | GET | Update | New query parser to support the AgentId GUID. |