Viewing an Existing Certificate Collection

To view an existing certificate collectionClosed The certificate search function allows you to query the Keyfactor Command database for certificates from any available source based on any criteria of the certificates and save the results as a collection that will be availble in other places in the Management Portal (e.g. expiration alerts and certain reports)., either browse to the Certificates dropdown on the Management Portal menu and select the desired collection from the dropdown (if the collection has Show in Navigator set as Yes), or browse to Certificates > Collection Manager from the Management Portal and then select View, or double-click the row, from the Certificate Collection Management grid. When you select the collection for viewing, the search will begin immediately and the certificate search grid will open with the results from the collection. For information on using the certificate search grid, see Certificate Search Page.

When viewing an existing collection, you can further refine the collection query by including additional selection criteria in the query field, but these are used in addition to the base query. You are not allowed to clear the base query for the collection, which is displayed above the advanced query field. For example, for the collection shown in Figure 63: Collection with Query Modification, if the user added this in the query field:

CN -notcontains "keyother"

The query would return all the certificates issued in the last 30 days with the string appsrvr in the CNClosed A common name (CN) is the component of a distinguished name (DN) that represents the primary name of the object. The value varies depending on the type of object. For a user object, this would be the user's name (e.g. CN=John Smith). For SSL certificates, the CN is typically the fully qualified domain name (FQDN) of the host where the SSL certificate will reside (e.g. servername.keyexample.com or www.keyexample.com). using a templateClosed A certificate template defines the policies and rules that a CA uses when a request for a certificate is received. referencing web but without the string keyother in the CN—in other words, the web server certificates for application servers issued in the last 30 days for the keyexample.com domain but not the web server certificates for application servers issued in the last 30 days for the keyother.com domain.

Figure 63: Collection with Query Modification

Available operations on a certificate collection include; Save, Save As, Delete Collection or view Permissions on the certificate collection.

Click Save to edit the existing collection. You may change the following about the collection from this option:

  • The collection Name.
  • The collection Description.
  • The collection query Content.
  • The Ignore Renewed Cert Results by setting.
  • The Show on Dashboard setting.
  • The Show on Navigator setting.

For more information on these, see Saving Search Criteria as a Collection.

Note:  Certificate collections that are configured for Certificate Entered Collection or Certificate Left Collection workflows (see Workflow Definition Operations) cannot be edited. This is done to prevent triggering a large number of entered/left workflows.

Click Save As to create a new collection based on the existing collection. You can then edit the search criteria for the new collection without affecting the existing collection. Click Delete Collection to delete the certificate collection. Click Permissions to view collection level permission for the collection (see Certificate Collection Permissions).

Tip:  If you Save a new certificate collection, or Save a change to an existing certificate collection, that change will be immediately reflected in the collection data used to display certificate collections on dashboards and reports. The data used by the dashboards and reports is stored in an intermediate table that is updated immediately. It will also continue to be updated periodically (approximately every 20 minutes by default as configured by the Dashboard Collection Caching Interval application setting) by the Keyfactor Command Service (see Application Settings: Console Tab).