Release Note Details v12.0
                                                        The following table includes a complete list of the features (large enhancements), product backlog items (small enhancements or segments of a larger feature), and bug fixes included in release v12.0.
Table 152: Items for Release v12.0
| ID | Product Area | Type | Description | 
|---|---|---|---|
| 52358 | .NET | Product Backlog Item | CA Connector should be built against .NET 8 | 
| 53188 | .NET | Product Backlog Item | Migrate Command to .NET 8 | 
| 52252 | .NET | Feature | CA Connector should be built against .NET 8 | 
| 52348 | .NET | Feature | Command should use .NET 8 | 
| 51588 | Alerts | Product Backlog Item | UI Update for Alerts | 
| 51590 | Alerts | Product Backlog Item | Option to Configure workflow for Alerts on Save | 
| 52432 | Alerts | Product Backlog Item | System Alert for when an Expiration Alert workflow has a key for an expiration alert that is not set up to use workflows | 
| 52434 | Alerts | Product Backlog Item | System Alert for when a Revocation Monitoring Alert workflow has a key for a Revocation Monitoring alert that is not set up to use workflows | 
| 53199 | Alerts | Product Backlog Item | New pending alert test endpoints | 
| 53206 | Alerts | Product Backlog Item | New revocation monitoring alert test endpoint | 
| 53217 | Alerts | Product Backlog Item | New pending alert test ui | 
| 54272 | Alerts | Product Backlog Item | Update Button Layout on Alert Test Dialogs | 
| 54274 | Alerts | Product Backlog Item | Change RunWorkflow/SendEmail Outcome For Alert Test | 
| 54291 | Alerts | Product Backlog Item | Update Button Layout on Alert Test Select Target Dialogs | 
| 51589 | Alerts | Product Backlog Item | Button to Configure workflow for Alerts | 
| 52051 | Alerts | Product Backlog Item | UseWorkflow System Alert for Revocation Monitoring | 
| 52415 | Alerts | Product Backlog Item | Add Workflow Definition Id Property in KeyRotation Alert Response | 
| 52433 | Alerts | Product Backlog Item | System Alert for when a SSH Key Rotation Alert workflow has a key for an SSH Key Rotation alert that is not set up to use workflows | 
| 53197 | Alerts | Product Backlog Item | New expiration alert test endpoints | 
| 53202 | Alerts | Product Backlog Item | New key rotation alert test endpoints | 
| 53211 | Alerts | Product Backlog Item | New expiration alert test UI | 
| 53216 | Alerts | Product Backlog Item | New key rotation alert test UI | 
| 53219 | Alerts | Product Backlog Item | New revocation monitoring alert test UI | 
| 54273 | Alerts | Product Backlog Item | Add Workflow Columns to Alert Display Grid | 
| 54275 | Alerts | Product Backlog Item | Add Link to Workflow Instance on Alert Test Result Dialog | 
| 54684 | Alerts | Product Backlog Item | Add Workflow Columns to Revocation Monitoring Display Grid | 
| 55850 | Alerts | Product Backlog Item | Add Detail Information to Status for Alert Test Result | 
| 53129 | Alerts | Feature | Alert Testing Rework | 
| 26521 | Alerts | Bug | Revocation Alerts Firing Even when Warn Isn’t Checked | 
| 31505 | Alerts | Bug | Expiration alerts not running when no event handlers or recipients defined | 
| 33742 | Alerts | Bug | Renewal handler logging of API call is insufficient | 
| 33910 | Alerts | Bug | CRL Revocation Monitoring Locations no Longer Support URL Encoded Strings | 
| 35474 | Alerts | Bug | Alert Logging is misleading and shows duplicate recipients | 
| 45544 | Alerts | Bug | Post/Monitoring/ResolveOCSP - The system should returns 400 when sending request with non existent CA Id. | 
| 46871 | Alerts | Bug | Alert test date labels don’t match semantics | 
| 52495 | Alerts | Bug | Schedule KeyRotation Alert with UseWorkflows Getting Error in EntityFramework | 
| 52575 | Alerts | Bug | LastExecution Property of Expiration Alerts Visible in Swagger Sample | 
| 52738 | Alerts | Bug | Form Fields Above Use Workflows Toggle Reverting on Click | 
| 53026 | Alerts | Bug | Creating / Updating Revocation Monitoring alert causes error | 
| 53955 | Alerts | Bug | Error - Revocation Monitoring Test Email Has No Input Value | 
| 54034 | Alerts | Bug | Pending Alert ADD/Copy Results with Duplicated Recipients | 
| 54612 | Alerts | Bug | Form Validation Regex Is Broken On The Analyze Event Handler Assembly File dialog | 
| 54699 | Alerts | Bug | Revocation Monitoring Query Endpoint Does Not Sort Sortable Fields | 
| 55134 | Alerts | Bug | Errors During CRL Processing | 
| 55147 | Alerts | Bug | Converting Alerts to Workflows Needs to Clear Existing Non-Workflow Settings | 
| 55151 | Alerts | Bug | Converting a CRL Alert to Workflow Offers No Option for When to Start Alerting | 
| 55159 | Alerts | Bug | Value Entered in Email Reminder for CRL Doesnt Save | 
| 55531 | Alerts | Bug | Revocation Monitoring Alert - When editing an existing recipient in the grid, a new recipient is being added instead of the recipient being updated | 
| 56288 | Alerts | Bug | Expiration Alert Test Results: Email message | 
| 56679 | Alerts | Bug | Unable to delete a Revocation Monitoring Alert that uses workflow | 
| 56851 | Alerts | Bug | Revocation Monitoring Test Result Dialog Missing Dates, Shows Random OCSP Data | 
| 57043 | Alerts | Bug | Expiration Alert Test Error on Non-Workflow Alerts | 
| 43002 | API | Product Backlog Item | Remove deprecated Cert Store Server API endpoints from v12 | 
| 48612 | API | Product Backlog Item | Allow API requests to supply a correlation token | 
| 48763 | API | Product Backlog Item | Include Cert Store Job Types in Agents/ID API Call | 
| 51580 | API | Product Backlog Item | Update SSH Key Rotation Alert API to allow for workflows | 
| 48598 | API | Product Backlog Item | Adding correlation token to API | 
| 51351 | API | Product Backlog Item | Update Agents/ID Endpoint to be stored procedure based | 
| 51578 | API | Product Backlog Item | Update Expiration Alert API to allow for workflows | 
| 51585 | API | Product Backlog Item | Update Monitoring API to allow for workflows | 
| 45026 | API | Feature | Externally-provided correlation ID | 
| 51536 | API | Feature | Delete PAM types with API | 
| 35329 | API | Bug | POST/Certificates/Import - The response code returns 500 instead of 200 when importing the certificate with add to certificate store | 
| 37915 | API | Bug | PUT /CertificateStores/DiscoveryJob Producing Object Reference Error | 
| 45400 | API | Bug | /Certificates/IdentityAudit/{id} uses wrong error message | 
| 46687 | API | Bug | AmmendedQuery Exposed in Swagger | 
| 46857 | API | Bug | /Certificates/Metadata /Certificates/Metadata/ - Swagger sample request is incorrect | 
| 48189 | API | Bug | Swagger example requests/responses are camelCase instead of PascalCase | 
| 48499 | API | Bug | Invalid swagger/openapi spec due to missing X-Keyfactor-Requested-With schema | 
| 52569 | API | Bug | Thumbprint returns as null vs empty string in GET Agents/Id | 
| 56788 | API | Bug | API Query endpoints fail due to mapping issue | 
| 53303 | Application Settings | Product Backlog Item | Template Regular Expression Case-Sensitivity Database Changes | 
| 52909 | Application Settings | Feature | Implement case-insensitive regex | 
| 49124 | Application Settings | Bug | No warning or message to the user when Require custom friendly name setting is changed based on Allow custom friendly name | 
| 54613 | Application Settings | Bug | SMTP Configure Credentials dialog has no title | 
| 52360 | Application Settings | Product Backlog Item | Create New Workflow Application Setting: Use Deprecated SAN Token Parser | 
| 53153 | Application Settings | Product Backlog Item | Global Regular Expression Case-Sensitivity Database Changes | 
| 55849 | Application Settings | Product Backlog Item | Add a new application setting for external documentation link | 
| 52207 | Application Settings | Feature | Approve Cert Store Dialog and Edit Certificate Store dialog Cert Store Container field to be searchable | 
| 52304 | Application Settings | Feature | Add Inventory Schedule to Approve Certificate Store Dialog | 
| 55452 | Application Settings | Bug | Report Footer Icon Value must be a File Path | 
| 55606 | Application Settings | Bug | SMTP - User must refresh page to see the UNDO button changes applied | 
| 56228 | Application Settings | Bug | Cannot Read Properties of UndefinedReact Error on Application Settings | 
| 48975 | Audit | Product Backlog Item | Improve purge audit log job scalability | 
| 48645 | Audit | Feature | Improved Purge Audit Log Job Scalability | 
| 26897 | Audit | Bug | API AuditLog - The response code returns 500 in case the request is sending with the invalid column for sortField parameter | 
| 35469 | Audit | Bug | Audit Log Download CSV is Returning All Records, not Search Results Records | 
| 45732 | Audit | Bug | Updating IdP gets Audited as Creation | 
| 48993 | Audit | Bug | Audit Log Download CSV is Broken for Most of the Fields | 
| 51728 | Audit | Bug | Orphaned audit job detail records possible when bulk editing many multiple metadata fields at once | 
| 53998 | Build | Product Backlog Item | Build pipelines for CA Connector - Microsoft | 
| 53999 | Build | Product Backlog Item | Build pipelines for CA Connector - EJBCA | 
| 55826 | Build | Bug | Critical vulnerabilities in PS libraries 7.2.0-7.4.0 | 
| 54413 | CA Gateway - HTTPS AnyGateway | Product Backlog Item | Ensure Build Method on HTTPClientBuilder Functions as Expected with New Bearer Token Logic | 
| 48510 | CA Gateway - HTTPS AnyGateway | Product Backlog Item | OAuth supported by the AnyCA Gateway REST | 
| 57126 | CA Gateway - HTTPS AnyGateway | Product Backlog Item | Ability to Request the RestCA Gateway to Return Extra Data when Enrolling | 
| 54417 | CA Gateway - Other | Product Backlog Item | Update GetClientAccessTokenAsync on HubListener to use common bearer token request method | 
| 48209 | Certificate Authorities | Product Backlog Item | Create GET Endpoints For Remote CA In Command | 
| 48211 | Certificate Authorities | Product Backlog Item | Create PUT & DELETE Endpoints For Remote CA In Command | 
| 48214 | Certificate Authorities | Product Backlog Item | Created The Dialog For The Add & Edit Buttons For Remote CA In Command | 
| 48469 | Certificate Authorities | Product Backlog Item | Update MSCA Client to use updated ICertificateAuthorityClient | 
| 48651 | Certificate Authorities | Product Backlog Item | Update Certificate Authority Dialog To Allow Use of Pools | 
| 48871 | Certificate Authorities | Product Backlog Item | Pool Validation Added From CA Connector Endpoints | 
| 48874 | Certificate Authorities | Product Backlog Item | Command uses updated ICertificateAuthorityClient methods | 
| 48941 | Certificate Authorities | Product Backlog Item | New PUT Endpoint Is Created To Save RabbitMQ Credentials | 
| 48958 | Certificate Authorities | Product Backlog Item | Add support for Remote PAM for DCOM CAs | 
| 48960 | Certificate Authorities | Product Backlog Item | Add support for Local PAM for HTTPS CAs | 
| 49072 | Certificate Authorities | Product Backlog Item | New GET Endpoint Is Created To Retrieve RabbitMQ Credentials | 
| 51591 | Certificate Authorities | Product Backlog Item | Allow CertificateAuthorityClient in Command to support OAuth | 
| 52277 | Certificate Authorities | Product Backlog Item | Cleanup Shared-CA-MS solution | 
| 52343 | Certificate Authorities | Product Backlog Item | Update CA Description in the UI | 
| 52406 | Certificate Authorities | Product Backlog Item | Update JobQueue PUT Endpoint To Make Scope Not Required | 
| 52486 | Certificate Authorities | Product Backlog Item | Add audience parameter support to OAuth React Component | 
| 52595 | Certificate Authorities | Product Backlog Item | Convert Edit CA dialog to Sliding Panel | 
| 52886 | Certificate Authorities | Product Backlog Item | Remove CertificateAuthorityDataManager | 
| 53089 | Certificate Authorities | Product Backlog Item | OAuth Implemented For RabbitMQ Test Button | 
| 54167 | Certificate Authorities | Product Backlog Item | New Audience Column Is Added To CA Table In DB | 
| 55915 | Certificate Authorities | Product Backlog Item | Reword Save and Test button on CA subpage | 
| 56240 | Certificate Authorities | Product Backlog Item | Add details for Key Retention setting on CA dialog | 
| 46345 | Certificate Authorities | Feature | Update the API and Management portal to allow for CA Connector management | 
| 47812 | Certificate Authorities | Feature | PAM support for CA secrets | 
| 55858 | Certificate Authorities | Feature | Show that a CA Connector is being used on the CAs grid | 
| 38761 | Certificate Authorities | Bug | Duplicate CA in CA health alert email | 
| 48682 | Certificate Authorities | Bug | Entrust CA Scan Pulls in Cert with NULL CSR and Certificate Values from 2018 - Causes Errors in Service Log | 
| 52022 | Certificate Authorities | Bug | PUT /CertificateAuthority/JobQueue null reference when password is not supplied. | 
| 52246 | Certificate Authorities | Bug | Test Connection fails when having Client Auth Cert selected for HTTPS CAs | 
| 52443 | Certificate Authorities | Bug | Allowed Requesters not saving for new CAs | 
| 52612 | Certificate Authorities | Bug | Test CA Connection error not displayed to user | 
| 52848 | Certificate Authorities | Bug | Integration Command-EJBCA issue after creation of a SSH CA on EJBCA: Error Converting Null to System.DateTime | 
| 53087 | Certificate Authorities | Bug | Certificate Authorities page - Error on SAVE and TEST for EJBCA | 
| 54136 | Certificate Authorities | Bug | CertificateAuthory - Remote CA Test works for when using CA configured with UO | 
| 54480 | Certificate Authorities | Bug | Test Connection not working as expected for OAuth HTTPS CAs | 
| 54607 | Certificate Authorities | Bug | Errors with leading # when enrolling with EJBCA or AnyCA Gateway | 
| 54759 | Certificate Authorities | Bug | Certificate Authority dialog loads CAConnector names with case sensitivity | 
| 55431 | Certificate Authorities | Bug | Changing CA Connector pool name for in-use connector doesn’t update CA | 
| 55604 | Certificate Authorities | Bug | CA Add/Edit dialog Back button should prompt for unsaved changed | 
| 56022 | Certificate Authorities | Bug | MSCA Sync Results in AD Users being tied to the Unknown IdP | 
| 56047 | Certificate Authorities | Bug | Certificate Authorities - Delegate Enrollment tool tip | 
| 56842 | Certificate Authorities | Bug | Connected and ConnectionId Fields Wiped After Updating a CAConnectors Fields | 
| 57198 | Certificate Authorities | Bug | Secrets not reflecting for new CA | 
| 33623 | Certificate Collections | Product Backlog Item | Add collection manager dialog for updating collection order | 
| 48974 | Certificate Collections | Product Backlog Item | Add new Column to Collection Manager to Display Collection Order | 
| 48979 | Certificate Collections | Product Backlog Item | Update PUT /CertificateCollections endpoint for CollectionOrder | 
| 48981 | Certificate Collections | Product Backlog Item | Update GET /CertificateCollections/NavItems to sort by CollectionOrder | 
| 49074 | Certificate Collections | Product Backlog Item | Update GET /CertificateCollections/{id} to add CollectionOrder | 
| 49076 | Certificate Collections | Product Backlog Item | Update GET /CertificateCollections/CollectionList to add CollectionOrder | 
| 52383 | Certificate Collections | Product Backlog Item | Create GET /CertificateCollections/CollectionOrdering | 
| 52389 | Certificate Collections | Product Backlog Item | Remove collection ordering field from dbo.CertificateQueries Table | 
| 52391 | Certificate Collections | Product Backlog Item | Remove CollectionOrder from GET /CertificateCollections/{id} | 
| 52393 | Certificate Collections | Product Backlog Item | Remove CollectionOrder from GET /CertificateCollections/CollectionList | 
| 52396 | Certificate Collections | Product Backlog Item | Remove Collection Ordering Column from Collection Manager Grid | 
| 52401 | Certificate Collections | Product Backlog Item | Change POST /CertificateCollections/Copy endpoint to update the dbo.CertificateOrder table | 
| 52405 | Certificate Collections | Product Backlog Item | New dbo.CollectionOrder table to store collection ordering | 
| 52409 | Certificate Collections | Product Backlog Item | Remove CollectionOrder from POST /CertificateCollections endpoint | 
| 52411 | Certificate Collections | Product Backlog Item | Remove CollectionOrder from PUT /CertificateCollections endpoint | 
| 52827 | Certificate Collections | Product Backlog Item | Change DELETE /CertficateCollections/{id} to remove collection from collection ordering | 
| 53138 | Certificate Collections | Product Backlog Item | Update API to indicate progress of Certificate Collection inventory processing | 
| 53155 | Certificate Collections | Product Backlog Item | Add Processed Count and Last Processed Time to Collection Page | 
| 53700 | Certificate Collections | Product Backlog Item | Update names for NumberProcessed and LastProcessed, Update UI | 
| 27645 | Certificate Collections | Feature | Modify Collection Order in Portal Dropdown | 
| 45413 | Certificate Collections | Feature | Remove Deprecated Endpoints from the Keyfactor API v12 | 
| 27265 | Certificate Collections | Bug | Deleting certificate collection from its certificate search page fails without notice when it is used by a report or alert | 
| 27317 | Certificate Collections | Bug | GetCSV Permission Errors have Status Code 500 | 
| 43403 | Certificate Collections | Bug | DELETE /CertificateCollections/{id} returns 500 error | 
| 51508 | Certificate Collections | Bug | Deleted Certificate Collection Remains in Navigator | 
| 52233 | Certificate Collections | Bug | New Certificate Collection not Displaying in Navigator | 
| 52278 | Certificate Collections | Bug | Certificate Collection Manager allows for multi select, but nothing is available | 
| 53520 | Certificate Collections | Bug | Navigation Order Doesn’t Make Sense in Right-Click Menu | 
| 53527 | Certificate Collections | Bug | Invalid Column Name Favorite | 
| 54406 | Certificate Collections | Bug | Verbiage for Collection Manager schedule needs updated for multiple schedules | 
| 54688 | Certificate Collections | Bug | Certificate Collection Doesn’t Save | 
| 46443 | Certificate Details | Bug | Unsaved Changes Prompt on Certificate Details does not appear when clicking X | 
| 50184 | Certificate Details | Bug | Newly Added Metadata Input Incorrectly Populates Its Default Value Into Cert Details Page | 
| 53380 | Certificate Details | Bug | Date is wrong after submission and refresh | 
| 57956 | Certificate Details | Bug | Ignoring unknown extension based SAN after v11.5 upgrade | 
| 49017 | Certificate Enrollment | Product Backlog Item | Support Option to Remove the First Line in CER when Downloading for CSR Enrollment Page | 
| 51410 | Certificate Enrollment | Product Backlog Item | Support Option to Remove the First Line in PEM when Downloading for PFX Enrollment Page | 
| 53154 | Certificate Enrollment | Product Backlog Item | Global Regular Expression UI and API Changes | 
| 53515 | Certificate Enrollment | Product Backlog Item | Warn a user when they use a CSR generated by Command Platform for CSR enrollment | 
| 55912 | Certificate Enrollment | Product Backlog Item | CSR Enrollment Page allows users to Auto-Select CA | 
| 46862 | Certificate Enrollment | Feature | Increase SubjectAltNameElements column to nvarchar(max) | 
| 51441 | Certificate Enrollment | Feature | SAN Add Button to be moved to the bottom of the section | 
| 54269 | Certificate Enrollment | Feature | Enrollment with non-specified CA | 
| 40732 | Certificate Enrollment | Bug | CSR Enrollment Portal cannot process CSRs generated by Google SCEP | 
| 49009 | Certificate Enrollment | Bug | PFX Enrollment Error | 
| 52251 | Certificate Enrollment | Bug | One-Click Renewal Fails for Template and CA with different ForestRoot Casing | 
| 53383 | Certificate Enrollment | Bug | CSR Enrollment fails with NRE | 
| 53415 | Certificate Enrollment | Bug | EF Exception occurs when attempting to install a PFX into a JKS | 
| 53561 | Certificate Enrollment | Bug | ReEnrollment Job Failure with Orchestrator | 
| 56095 | Certificate Enrollment | Bug | React Error Trying to Load PFX or CSR Enrollment with Metadata Type with NULL Hint | 
| 56377 | Certificate Enrollment | Bug | CSR Generation page error on load | 
| 58336 | Certificate Enrollment | Bug | Unable to use custom password in PFX enrollment UI | 
| 52803 | Certificate Metadata | Product Backlog Item | Condense metadata functions | 
| 53075 | Certificate Metadata | Product Backlog Item | Removal of MetadataEditorFields | 
| 53305 | Certificate Metadata | Product Backlog Item | Global Metadata Regular Expression Case-Sensitivity API/UI Changes | 
| 53309 | Certificate Metadata | Product Backlog Item | Template Metadata Regular Expression Case-Sensitivity API/UI Changes | 
| 53312 | Certificate Metadata | Product Backlog Item | Case-Sensitivity for Metadata during enrollment and saving metadata | 
| 53775 | Certificate Metadata | Product Backlog Item | Add MetadataValueConverter | 
| 55964 | Certificate Metadata | Product Backlog Item | Additional UI updates for metadata hints | 
| 26601 | Certificate Metadata | Feature | Metadata Refactoring | 
| 45974 | Certificate Metadata | Feature | Hint for Metadata Dropdown | 
| 36743 | Certificate Metadata | Bug | Certificate Collection Edit All Metadata has no Front-End Validation | 
| 53004 | Certificate Metadata | Bug | New Email Metadata Data Type Shows as Blank on Metadata Tab when Editing a Template | 
| 53315 | Certificate Metadata | Bug | Certificate Metadata Can Have Invalid Default Value | 
| 55233 | Certificate Metadata | Bug | Metadata Name for Email-Contact is undefined in v12 | 
| 52450 | Certificate Operations | Product Backlog Item | Update Remove Subject Header to be Include Subject Header and defaults to true | 
| 52625 | Certificate Operations | Product Backlog Item | One-Click Renewal Wording Change | 
| 53193 | Certificate Operations | Product Backlog Item | Remove SQLLoader references from SqlCrlDistributionPointUrl, SqlSubjectAltName, and SqlExtendedKeyUsage | 
| 45557 | Certificate Operations | Feature | Revoke Confirmation Dialog | 
| 53481 | Certificate Operations | Feature | Password complexity when downloading certificate with private key (Alphanumeric Only Option) | 
| 53355 | Certificate Operations | Bug | Certificate Request Import does not recognize SAN types | 
| 48972 | Certificate Search | Product Backlog Item | Cert search and collections should check include expired and revoked certs | 
| 43706 | Certificate Search | Bug | Certificate Search Grid Doesn’t Refresh After Renewal | 
| 53411 | Certificate Search | Bug | Saved Cert Collection with Include Revoked or Include Expired Unchecked Loads with These Checked | 
| 53107 | Certificate Stores | Product Backlog Item | Add/Edit Certificate Store Dialog Container option is updated to be a search select | 
| 53125 | Certificate Stores | Product Backlog Item | Discovered Cert Stores can be configured with a schedule on approval | 
| 53917 | Certificate Stores | Product Backlog Item | Enable Weekly Schedule for Cert Store Containers | 
| 25875 | Certificate Stores | Feature | Update Container schedules to include Immediate/Exactly Once | 
| 32907 | Certificate Stores | Feature | Cert Store Inventory Scheduled on Weekly Basis | 
| 43545 | Certificate Stores | Feature | Reenrollment Jobs with required metadata should not fail | 
| 48666 | Certificate Stores | Feature | Increase size of certificate store type custom field default value in SQL | 
| 53352 | Certificate Stores | Feature | Certificate Store Discovery Page Search Function | 
| 26515 | Certificate Stores | Bug | Can renew a cert without Read and Schedule - Certificate Store Management permission | 
| 27899 | Certificate Stores | Bug | POST/CertificateStoreTypes - Can create a storetype with the empty Name/DisplayName/Type (required field) data of Properties | 
| 36480 | Certificate Stores | Bug | Certificate Store - User able to schedule a Discovery Job although user don’t have Privileged Access Management: Read permission | 
| 37429 | Certificate Stores | Bug | POST /CertificateStoreContainers - Status code should return 400 when sending request with empty Container Name | 
| 37818 | Certificate Stores | Bug | Insufficient Backend Validation for Certificate Store Type Entry Parameters and Custom Fields | 
| 48236 | Certificate Stores | Bug | Required Cert Store Alias Not Enforced in PFX Enrollment | 
| 52194 | Certificate Stores | Bug | GET /CertificateStoreContainers Includes Parameters That Shouldn’t be Exposed | 
| 52211 | Certificate Stores | Bug | In Reenrollment, CAs with no templates show all templates | 
| 53046 | Certificate Stores | Bug | Cleaner more clear message time field cannot be empty | 
| 53080 | Certificate Stores | Bug | Remove checkboxes from the Certificate Store Types grid | 
| 53187 | Certificate Stores | Bug | Discovered Stores tab count does not accurately reflect actual count after grid load | 
| 53207 | Certificate Stores | Bug | Cert Store Discovery Grid extends past the bottom boarder | 
| 53284 | Certificate Stores | Bug | Server Username and Server Password Dialogs not displaying when Adding Cert Stores for Types that Need Server | 
| 53286 | Certificate Stores | Bug | Server Username and Server Password Dialogs on Cert Store Discover tab | 
| 53300 | Certificate Stores | Bug | Cert Store Inventory cert information not displaying | 
| 53354 | Certificate Stores | Bug | Query Certificate returns ugly message for user without Read Certificates Permission | 
| 54168 | Certificate Stores | Bug | Cert Store Add/Edit dialog crashes on store type with a Secret custom field | 
| 54320 | Certificate Stores | Bug | Null Reference: Certificate Store Custom Secret Field | 
| 56153 | Certificate Stores | Bug | Can not Update Cert Store Password through Set New Password | 
| 56645 | Certificate Stores | Bug | Certificate Store SET STORE PASSWORD - Cert store values are being cleared out after entering Set Store Password | 
| 55137 | Certificate Templates | Bug | Template with duplicate OID not imported | 
| 55463 | Certificate Templates | Bug | Command Fails Importing EJBCA Templates That Differ Only In Case | 
| 58568 | Certificate Templates | Bug | EJBCA Template Import Issue | 
| 48210 | Certificate Authorities | Product Backlog Item | Create POST Endpoint For Remote CA In Command | 
| 48213 | Certificate Authorities | Product Backlog Item | Create the Gateway Connectors UI For The Remote CA In Command | 
| 48297 | Certificate Authorities | Product Backlog Item | Create New DB Table For Remote CA In Command | 
| 48652 | Certificate Authorities | Product Backlog Item | Update Certificate Authority Endpoints To Allow For UseConnector & ConntectorPool Properties | 
| 48873 | Certificate Authorities | Product Backlog Item | Update EJBCA Client to use updated ICertificateAuthorityClient | 
| 48939 | Certificate Authorities | Product Backlog Item | Create a new DB Table To Store RabbitMQ Credentials | 
| 48942 | Certificate Authorities | Product Backlog Item | Basic Button To Test RabbitMQ Credentials | 
| 48959 | Certificate Authorities | Product Backlog Item | Add support for Remote PAM for HTTPS CAs | 
| 48968 | Certificate Authorities | Product Backlog Item | Allow Remote PAM Providers for CA secrets in the UI | 
| 51337 | Certificate Authorities | Product Backlog Item | RabbitMQ Credentials Can Not Be Unset When In Use By Connectors | 
| 52268 | Certificate Authorities | Product Backlog Item | Edit/View RabbitMQ Creds Tab | 
| 52276 | Certificate Authorities | Product Backlog Item | Cleanup Shared-CA-EJBCA solution | 
| 52484 | Certificate Authorities | Product Backlog Item | Increase margins on OAuthInput | 
| 52496 | Certificate Authorities | Product Backlog Item | Update PUT/GET JobQueue Endpoint To Include New Field Audience | 
| 52603 | Certificate Authorities | Product Backlog Item | Remove automatic editing across CA dialog tabs | 
| 54280 | Certificate Authorities | Product Backlog Item | Edit CA API endpoints to include optional Audience parameter (Test) | 
| 55529 | Certificate Authorities | Product Backlog Item | CA Sliding Panel UX Improvements | 
| 56330 | Certificate Authorities | Product Backlog Item | Finalizing CA Panel Conversion | 
| 46346 | Certificate Authorities | Feature | Use Remote Client setting on Certificate Authorities | 
| 51354 | Certificate Authorities | Feature | Refactor CAClientFactory in Command | 
| 52181 | Certificate Authorities | Feature | Update CA Description in the UI | 
| 52053 | Certificate Authorities | Bug | Token Expiration on OAuth CA Test | 
| 53628 | Certificate Authorities | Bug | Save Job Queue Connections Requires Client Secret With Secret Saved in Database Already | 
| 54159 | Certificate Authorities | Bug | Duplicate CA in CA Threshold Alerts Email | 
| 54179 | Certificate Authorities | Bug | Connector Pool is not cleared when Use CA Connector is set to false | 
| 54443 | Certificate Authorities | Bug | Recipients Grid are not Aligned on Alert Recipients Tab | 
| 54780 | Certificate Authorities | Bug | Enrollment error message references EJBCA even when REST Gateway is used | 
| 55222 | Certificate Authorities | Bug | Unable to save CA when it is unreachable | 
| 55432 | Certificate Authorities | Bug | Error configuring a standalone CA - Configuration Tenant property is invalid | 
| 55555 | Certificate Authorities | Bug | OAuthInput does not highlight fields with Yup validation error | 
| 55770 | Certificate Authorities | Bug | Saving toggle on Key Retention with EJBCA in UI doesn’t save | 
| 33622 | Certificate Collections | Product Backlog Item | Add collection ordering field to DB | 
| 33626 | Certificate Collections | Product Backlog Item | Add new endpoint to set collection ordering | 
| 48978 | Certificate Collections | Product Backlog Item | Update POST /CertificateCollections endpoint for CollectionOrder | 
| 48980 | Certificate Collections | Product Backlog Item | Update POST /CertificateCollections/Copy endpoint for CollectionOrder | 
| 49073 | Certificate Collections | Product Backlog Item | Update GET /CertificateCollections/{name} to add CollectionOrder | 
| 49075 | Certificate Collections | Product Backlog Item | Update GET /CertificateCollections and GET /CertificateCollections/Edit/{id} to add CollectionOrder | 
| 52382 | Certificate Collections | Product Backlog Item | Change PUT /CertificateCollections/CollectionOrdering to use dbo.CollectionOrder table | 
| 52384 | Certificate Collections | Product Backlog Item | Remove Show In Navigator from collection grid and edit/update dialog | 
| 52390 | Certificate Collections | Product Backlog Item | Remove CollectionOrder from GET /CertificateCollections and GET /CertificateCollections/Edit/{id} | 
| 52392 | Certificate Collections | Product Backlog Item | Remove CollectionOrder from GET /CertificateCollections/{name} | 
| 52395 | Certificate Collections | Product Backlog Item | Change GET /CertificateCollections/NavItems to sort by the collection ordering from the dbo.CollectionOrdering table | 
| 52398 | Certificate Collections | Product Backlog Item | Change POST /CertificateCollections endpoint to update the dbo.CertificateOrder table | 
| 52403 | Certificate Collections | Product Backlog Item | Change PUT /CertificateCollections endpoint to update the dbo.CertificateOrder table | 
| 52408 | Certificate Collections | Product Backlog Item | Revert GET /CertificateCollections/NavItems to sort by the collection name | 
| 52410 | Certificate Collections | Product Backlog Item | Remove CollectionOrder from POST /CertificateCollections/Copy endpoint | 
| 52417 | Certificate Collections | Product Backlog Item | Add a message stating navigator limit for Show on Navigator option in the save collection dialog. | 
| 52833 | Certificate Collections | Product Backlog Item | Remove Favorite Column from dbo.CertficiateQueries table | 
| 53147 | Certificate Collections | Product Backlog Item | Add Processed Count and Last Processed Time to Collection Manager Page | 
| 53281 | Certificate Collections | Product Backlog Item | Add Last Processed Time to Certificate Collection API endpoints | 
| 53960 | Certificate Collections | Product Backlog Item | Add API endpoint to get information on schedule for collection processing | 
| 53081 | Certificate Collections | Feature | Indicate Progress of Certificate Collection inventory processing | 
| 54116 | Certificate Collections | Bug | %TODAY% Token variety breaks report drilldowns | 
| 57235 | Certificate Collections | Bug | Certificate Collection Save fails on when service account is not db_owner | 
| 51383 | Certificate Enrollment | Product Backlog Item | Update CSR Enrollment Download Options | 
| 51414 | Certificate Enrollment | Product Backlog Item | Support Option to Remove the First Line in PEM when Downloading for Cert Search Download Dialog | 
| 52232 | Certificate Enrollment | Product Backlog Item | SAN Add Button to be moved to the bottom of the section | 
| 53304 | Certificate Enrollment | Product Backlog Item | Template Regular Expression UI and API Changes | 
| 53310 | Certificate Enrollment | Product Backlog Item | Case-Sensitivity For Subject and SANs | 
| 53477 | Certificate Enrollment | Product Backlog Item | Increase SubjectAltNameElements column to nvarchar(max) | 
| 55911 | Certificate Enrollment | Product Backlog Item | PFX Page allows users to Auto-Select CA | 
| 48421 | Certificate Enrollment | Feature | Support Option to Remove the First Line in CER when Downloading | 
| 53025 | Certificate Enrollment | Feature | Add a Warning When Pasting CSR that was Generated in CSR Generation into the CSR Enrollment Page | 
| 54074 | Certificate Enrollment | Bug | Error during PFX enrollment with DigiCert DCOM AnyGateway in Command (External Validation) | 
| 54329 | Certificate Enrollment | Bug | Enrollment error when enrolling with template-level metadata regex validation | 
| 55048 | Certificate Enrollment | Bug | Unable to import templates when pfx enrolling with EJBCA using OAuth | 
| 57427 | Certificate Enrollment | Bug | CSR Enrollment Warning Message re Command Generated CSR Does Not Allow Continue | 
| 58316 | Certificate Enrollment | Bug | When CSR enrollment doesn’t like the BEGIN REQUEST/END REQUEST delimiters, no error pops up | 
| 52654 | Certificate Metadata | Product Backlog Item | Refactor MetadataDataStore | 
| 52815 | Certificate Metadata | Product Backlog Item | Cleanup Metadata Service | 
| 53254 | Certificate Metadata | Product Backlog Item | Global Metadata Regular Expression Case-Sensitivity Database Changes | 
| 53308 | Certificate Metadata | Product Backlog Item | Template Metadata Regular Expression Case-Sensitivity Database Changes | 
| 53372 | Certificate Metadata | Product Backlog Item | Remove metadata fields DAL references | 
| 54026 | Certificate Metadata | Product Backlog Item | Add new metadata service tests | 
| 54484 | Certificate Metadata | Product Backlog Item | Hint for Metadata Dropdown | 
| 56097 | Certificate Metadata | Bug | POST /Enrollment/PFX Generates Null Reference Error with Nonexistent Metadata Field | 
| 58371 | Certificate Metadata | Bug | Metadata Edit Dialog - Description Tooltip Misplacement | 
| 52451 | Certificate Operations | Product Backlog Item | Remove Blank Lines from downloaded PEM file when IncludeChain and IncludePrivateKey are true | 
| 53195 | Certificate Operations | Product Backlog Item | Remove all usage of EF from DataStores | 
| 53200 | Certificate Operations | Product Backlog Item | Migrate CertUtilities to a data store | 
| 53412 | Certificate Operations | Product Backlog Item | Revoke Confirmation Dialog | 
| 54319 | Certificate Operations | Product Backlog Item | Password Complexity When Downloading Certificate With Include Private Key Checked (Alphanumeric Only Option) | 
| 52423 | Certificate Operations | Feature | One-Click Renewal Wording Change | 
| 53034 | Certificate Search | Product Backlog Item | Revert changes to GET /Certificates include revoked and include expired changes | 
| 46820 | Certificate Search | Feature | 
                                                                         Default to Include Revoked/Expired Certificates NOTE: Behavior reversed in release 12.1.  | 
                                                                
| 58344 | Certificate Search | Bug | Recent Certificate Expiration not recognized by Certificate Search | 
| 43438 | Certificate Stores | Product Backlog Item | Reenrollment Jobs with required metadata should ignore them and proceed | 
| 48977 | Certificate Stores | Product Backlog Item | Increase size of fields in Cert Store Custom Fields | 
| 53030 | Certificate Stores | Product Backlog Item | Enable Weekly Schedule for CertStore Inventory Job | 
| 53124 | Certificate Stores | Product Backlog Item | Manage Discovered Certificate Store Dialog container option is updated to be a search select | 
| 53918 | Certificate Stores | Product Backlog Item | Cert Store Containers can be scheduled for Immediately/Exactly Once | 
| 54307 | Certificate Stores | Product Backlog Item | Enhanced querying on Cert Store Discovery page | 
| 53988 | Certificate Stores | Bug | Certificate Stores Edit/Reenrollment Dialog Shows React Error After Closing | 
| 54615 | Certificate Stores | Bug | Certificate Stores types that need a server username/password - values not being saved within dialog | 
| 54680 | Certificate Stores | Bug | Unable to EDIT/DELETE certificate store when cert store type has custom secret field | 
| 55922 | Certificate Stores | Bug | GET /CertificateStoreContainers/{id} - Automapper error mapping null schedule string | 
| 56045 | Certificate Stores | Bug | Certificate Stores -loading message does not disappear after certificate store(s) have been loaded | 
| 56990 | Certificate Stores | Bug | Cert Store Type value appears unchanged when creating a new cert store | 
| 52887 | Certificate Templates | Product Backlog Item | Remove CertificateTemplateDataManager | 
| 56958 | Certificate Templates | Bug | Populating template cache not working with remote pam | 
| 45444 | Code Analysis | Product Backlog Item | Update Oracle.ManagedDataAccess.dll in Logi Binaries | 
| 55920 | Containers | Product Backlog Item | Helm Chart for UO | 
| 55433 | Containers | Feature | Universal Orchestrator Helm Chart | 
| 25446 | Dashboard | Product Backlog Item | Ability to manually choose display order of collections on the dashboard | 
| 47672 | Dashboard | Product Backlog Item | Outdated JavaScript Dependencies in Logi | 
| 52645 | Dashboard | Feature | Collection ordering on Dashboard | 
| 47714 | Dashboard | Bug | Risk Header Expired in last 7 Days Drilldown not showing expired certs | 
| 56627 | Dashboard | Bug | Adding a collection to the dashboard should add the collection to the end of the list | 
| 57005 | Dashboard | Bug | Incorrect syntax near s message in Dashboard when Collection Name has Apostrophe | 
| 48570 | Data Layer | Product Backlog Item | Case-insensitive embedded SQL loading | 
| 52588 | Data Layer | Product Backlog Item | Consolidate Command SQL loaders and datastores | 
| 33855 | Data Layer | Feature | Embedded SQL loading shouldn’t be case-sensitive | 
| 51437 | Documentation | Product Backlog Item | Add Storybook documentation to OAuthInput and Secret components | 
| 54343 | Documentation | Product Backlog Item | Support documentation for hosted customers | 
| 54341 | Documentation | Feature | Support documentation for hosted customers | 
| 46712 | Documentation | Bug | Swagger errors when opening GET Certificate/{id} section | 
| 54593 | Documentation | Bug | Command pages with doc links are broken | 
| 48217 | EJBCA Integration | Product Backlog Item | Create OAuth React Component | 
| 48229 | EJBCA Integration | Product Backlog Item | OAuth can be provided to EJBCA Client | 
| 48304 | EJBCA Integration | Product Backlog Item | Add OAuth Fields to CertificateAuthorities table | 
| 52531 | EJBCA Integration | Product Backlog Item | EJBCA Client supports multiple OAuth Identity Providers | 
| 47815 | EJBCA Integration | Feature | Support OAuth for connecting to EJBCA | 
| 53983 | EJBCA Integration | Bug | EJBCA Remote CA Connector - SAN type URI error | 
| 48219 | EJBCA Integration | Product Backlog Item | Add OAuth React component for EJBCA in CA dialog | 
| 48230 | EJBCA Integration | Product Backlog Item | Edit CA API endpoints to accept OAuth parameters | 
| 52530 | EJBCA Integration | Product Backlog Item | Add optional Audience OAuth parameter to EJBCA Client | 
| 52532 | EJBCA Integration | Product Backlog Item | Edit CA API endpoints to include optional Audience parameter (Get, Post, Put) | 
| 56007 | Identity Providers | Product Backlog Item | IdentityProviders - API, Add IDP(s) to Permission Sets | 
| 56176 | Identity Providers | Product Backlog Item | IdentityProviders - Config Wizard, new IDP(s) are added to the GPS | 
| 53038 | Identity Providers | Bug | Identity Provider Search Query Field dropdown options are not consistent with the grid | 
| 58362 | Identity Providers | Bug | IdentityProviders - API, IDP validation needs to validate against the IDP original permission set | 
| 52387 | Identity Providers | Product Backlog Item | Create a standardized bearer token request method | 
| 56032 | Identity Providers | Product Backlog Item | IdentityProviders - UI, Add IDP(s) to Permission Sets | 
| 52385 | Identity Providers | Feature | Expose a method to standardize bearer token requests | 
| 55866 | Identity Providers | Feature | IdentityProviders - Add IDP(s) to Permission Sets | 
| 52984 | Installation | Product Backlog Item | Upgrade Modules Use Native Models - ClaimsAwareSecurityRoleSigning | 
| 52986 | Installation | Product Backlog Item | Upgrade Modules Use Native Models - SecurityRoleSigning | 
| 52989 | Installation | Product Backlog Item | Upgrade Modules Use Native Models - MigratePermissions | 
| 53992 | Installation | Product Backlog Item | Install CA Connector API via MSI | 
| 53994 | Installation | Product Backlog Item | Config wizard allows OAuth IdP to be initialized while still using AD for Portal/API/Agents | 
| 53996 | Installation | Product Backlog Item | CA Connector install script for Windows | 
| 47644 | Installation | Product Backlog Item | Rename Identity Provider Name Parameter to AuthenticationScheme - Back End | 
| 48531 | Installation | Product Backlog Item | Upgrade Path for current Enrollment/Revocation workflows | 
| 52386 | Installation | Product Backlog Item | Update Shared-InstallCmdlets to use common bearer token request method | 
| 52983 | Installation | Product Backlog Item | Upgrade Modules Use Native Models - AuditXmlUpgradeModule | 
| 52985 | Installation | Product Backlog Item | Upgrade Modules Use Native Models - LegacySigningValidation | 
| 52987 | Installation | Product Backlog Item | Upgrade Modules Use Native Models - RemoveGranularIdPPermissions | 
| 52990 | Installation | Product Backlog Item | Upgrade Modules Use Native Models - RemoveRedundantRolePermissions | 
| 53993 | Installation | Product Backlog Item | CA Connector API can be configured in IIS | 
| 53995 | Installation | Product Backlog Item | Config wizard collects RabbitMQ info for CA Connector API | 
| 53997 | Installation | Product Backlog Item | CA Connector install script for Linux | 
| 51292 | Installation | Feature | Upgrade Modules Use Native Models | 
| 52868 | Installation | Feature | CA Connector Installation | 
| 26419 | Installation | Bug | Newly Imported Templates Cause Error That Prevents Enrollment | 
| 46426 | Installation | Bug | Database Upgrade steps cannot be cancelled | 
| 48175 | Installation | Bug | RemoveGranularIdPPermissions and RemoveRedundantRolePermissions Not Using Local Models | 
| 51241 | Installation | Bug | PFX Enrollment is disabled by default on fresh installs | 
| 53384 | Installation | Bug | Command Installation Image needs to be Updated | 
| 54096 | Installation | Bug | Update Keyfactor Logo on Command Installation | 
| 54496 | Installation | Bug | Unable to configure database Error | 
| 54793 | Installation | Bug | RabbitMQ Warning in Installer is Too Long | 
| 54796 | Installation | Bug | Error on Upgrade Script CDPDefinition_UseWorkflows.sql | 
| 55441 | Installation | Bug | Serialization Errors During Database Creation | 
| 55447 | Installation | Bug | Error Updating Identity Provider in Config Wizard | 
| 55776 | Installation | Bug | ConfigWizard - Adding a new IDP with exisiting IDP(s) throws update validation error - Config Wizard/Console | 
| 55873 | Installation | Bug | Config wizard crashes on upgrade script exception | 
| 56078 | Installation | Bug | Duplicate identity providers in config wizard | 
| 58574 | Installation | Bug | RegenerateAuditSigningKey upgrade module can fail if there are incomplete bulk audit records in the database | 
| 38747 | Licensing | Bug | Unable to swap expired license from inside Command | 
| 53400 | Licensing | Bug | Error on Licensing Page | 
| 34178 | Logging | Feature | Add CorrelationToken to API response | 
| 53209 | Management Portal | Product Backlog Item | New display emails component | 
| 53240 | Management Portal | Product Backlog Item | Change favicon in command | 
| 56790 | Management Portal | Feature | Reduce the size of the Vendor file | 
| 46758 | Management Portal | Bug | Error When Sort on Provider Column on Claims Page | 
| 47979 | Management Portal | Bug | Unable to add claims to Administrator role through the UI | 
| 48437 | Management Portal | Bug | Identity Providers edit panel gives unsaved changes message when nothing has been touched | 
| 52635 | Management Portal | Bug | Console Alert Titles Overflowing Alert Panel | 
| 52995 | Management Portal | Bug | Font Incorrect on Right-Click Dropdown Menu | 
| 53484 | Management Portal | Bug | SearchSelect Status Icons Show When Disabled | 
| 53794 | Management Portal | Bug | Date Metadata Has Unnecessary Change Logged to History | 
| 53210 | Management Portal | Product Backlog Item | New generate targets component | 
| 53215 | Management Portal | Product Backlog Item | New select targets component | 
| 53637 | Management Portal | Product Backlog Item | Indicate container is optional for cert store workflow configuration | 
| 56872 | Management Portal | Product Backlog Item | Replace Monaco editor with light-weight Monaco editor | 
| 52882 | Management Portal | Feature | New FavIcon for the new Colors | 
| 53795 | Management Portal | Bug | Bulk Metadata Edit does not show correct values for Boolean metadata | 
| 47420 | Orchestrator API | Bug | Orchestrator approval status set to New in with custom Registration Handler when there is a Capability Change and an error in the RH | 
| 53104 | Orchestrator API | Bug | AgentServer - missing interface implementation bug, dotfuscator renaming method issue | 
| 53801 | Orchestrator API | Bug | Object reference error when registering Orchestrator when all Orchestrators capabilities don’t exist in Command | 
| 47608 | Orchestrator Management | Bug | Orchestrator Management Dialog Shows Zeros for Certificate Thumbprint Fields | 
| 57283 | Orchestrator Management | Bug | /AgentBlueprint/GenerateBlueprint /AgentBlueprint/GenerateBlueprint - Sending valid request results in 500 | 
| 45466 | Orchestrator API | Bug | POST /OrchestratorJobs/Unschedule - The system should returns 400 when sending request with query has not any AgentId | 
| 58001 | Orchestrator Management | Bug | GET /Agents/{guid} - response with error 500 after generating a blueprint | 
| 41216 | Orchestrators | Product Backlog Item | Remove Pre/Post Scripts from the Universal Orchestrator | 
| 55523 | Orchestrators | Product Backlog Item | Job status in UO logs | 
| 48538 | Orchestrators | Product Backlog Item | Add Capabilities tab to the Orchestrator Dialog | 
| 54442 | Orchestrators | Product Backlog Item | Ensure Orchestrator can still connect to Command via OAuth | 
| 39239 | Orchestrators | Feature | Add Capabilities tab to the Orchestrator Dialog | 
| 42973 | Orchestrators | Feature | Sunset Orchestrator Job Pre/Post Scripts | 
| 52283 | Orchestrators | Feature | Add further detail to the job status in Universal Orchestrator logs | 
| 53778 | Orchestrators | Bug | Universal Orchestrator does not fill in Required Metadatafields with Default option | 
| 56780 | Orchestrators | Bug | IOrchestratorRegistrationHandler - Assembly & File Version updates | 
| 52280 | PAM | Product Backlog Item | Create endpoint to delete PAM types | 
| 48987 | PAM | Product Backlog Item | Move Secret Components to Shared React Components | 
| 49127 | PAM | Product Backlog Item | Update Secret Components to be functional components | 
| 53198 | Private Keys | Product Backlog Item | Migrate PrivateKeyHelper to a data store | 
| 48868 | Remote CA Management | Product Backlog Item | Long-running CA Sync jobs refresh token | 
| 52021 | Remote CA Management | Product Backlog Item | CA Connector API AuthN | 
| 52101 | Remote CA Management | Product Backlog Item | EJBCA ICertificateAuthorityClientFactory implementation | 
| 52637 | Remote CA Management | Product Backlog Item | Update CAConnector to provide information needed for AuthZ | 
| 52723 | Remote CA Management | Product Backlog Item | Create GET /CertificateAuthority/{caID} | 
| 52724 | Remote CA Management | Product Backlog Item | Add method to return Access Model in the CAClientFactory | 
| 52838 | Remote CA Management | Product Backlog Item | Add CA Connector API Endpoint to record heartbeat | 
| 53221 | Remote CA Management | Product Backlog Item | Resolve Remote PAM Secrets on CA Connector | 
| 53492 | Remote CA Management | Product Backlog Item | Implement RabbitMQCAClient SimpleJobs | 
| 53502 | Remote CA Management | Product Backlog Item | Create POST /Job/{jobID}/Result endpoint for CAConnectorAPI | 
| 53504 | Remote CA Management | Product Backlog Item | Create POST /Job/{jobID}/Fail endpoint for CAConnector API | 
| 53508 | Remote CA Management | Product Backlog Item | Validate username and jobId for Simple/Streaming job results | 
| 53517 | Remote CA Management | Product Backlog Item | Implement ApproveRequest & DenyRequest SimpleJobs | 
| 53519 | Remote CA Management | Product Backlog Item | CAConnector can return Simple Job Results | 
| 53534 | Remote CA Management | Product Backlog Item | Implement RecoverArchivedKey SimpleJob | 
| 53536 | Remote CA Management | Product Backlog Item | Implement Test SimpleJobs for HTTPS CAs | 
| 53538 | Remote CA Management | Product Backlog Item | Implement CertRequestSync Streaming Job | 
| 53779 | Remote CA Management | Product Backlog Item | Prevent deletion of last in-use CA Connector | 
| 53782 | Remote CA Management | Product Backlog Item | Change Pool Name to CA Connector Pool Name | 
| 53784 | Remote CA Management | Product Backlog Item | Add Tooltip for Auth Info in CA Connector dialog | 
| 53786 | Remote CA Management | Product Backlog Item | Add tooltips to mutually exclusive checkboxes | 
| 54294 | Remote CA Management | Product Backlog Item | CAConnector can return paged Job Results | 
| 54399 | Remote CA Management | Product Backlog Item | RabbitMQ_Get.sql SELECT should name individual columns | 
| 54403 | Remote CA Management | Product Backlog Item | Implement Test SimpleJobs for DCOM CAs | 
| 54425 | Remote CA Management | Product Backlog Item | Communicate failure in job pickup due to unrecognized job type | 
| 54677 | Remote CA Management | Product Backlog Item | Simple Jobs should not share a RabbitMQ channel | 
| 54681 | Remote CA Management | Product Backlog Item | CA Connector API logging configuration | 
| 54997 | Remote CA Management | Product Backlog Item | Rename Job Queue to Task Queue | 
| 55111 | Remote CA Management | Product Backlog Item | Backpressure retry logic in CA Connector API | 
| 55847 | Remote CA Management | Product Backlog Item | Install CA Connector API without fully configuring | 
| 56180 | Remote CA Management | Product Backlog Item | CA grid shows if CA Connector is used | 
| 56640 | Remote CA Management | Product Backlog Item | IdP-qualify CA Connector AuthInfo value, UI | 
| 46347 | Remote CA Management | Feature | Refactor Remote CA Client to proxy ICertificateAuthorityClient methods | 
| 47870 | Remote CA Management | Feature | Add job type to log file to make troubleshooting easier | 
| 48885 | Remote CA Management | Feature | Shared-CA implementation code cleanup | 
| 52103 | Remote CA Management | Feature | CA Connector Heartbeat | 
| 52263 | Remote CA Management | Feature | JobNotifyHub Connect/Disconnect | 
| 52264 | Remote CA Management | Feature | CA Connector Job Execution | 
| 52869 | Remote CA Management | Feature | CA Connector API High Availability | 
| 52870 | Remote CA Management | Feature | Remote CA -> CA Connector migration | 
| 53490 | Remote CA Management | Feature | Implement RabbitMQCertificateAuthorityClient | 
| 55158 | Remote CA Management | Feature | GMSA Swap Post Install Remote CA Connector | 
| 55236 | Remote CA Management | Feature | CA Connector supports Auth0 IdP | 
| 34912 | Remote CA Management | Bug | In-Place install on Linux fails to find installed dotnet runtimes after install | 
| 36433 | Remote CA Management | Bug | In-place install does not configure logging correctly | 
| 43692 | Remote CA Management | Bug | Remote CA Client installer does not properly escape path to service executable | 
| 50183 | Remote CA Management | Bug | Deleting CAConnector with invalid Id results in 404 | 
| 52663 | Remote CA Management | Bug | OAuth React component briefly displays No Value checkbox | 
| 54240 | Remote CA Management | Bug | Job Queue client secret is null during OAuth login when starting up CAConnectorAPI project | 
| 54657 | Remote CA Management | Bug | RabbitMQ binding failure can leave CA Connector record in an invalid state | 
| 54992 | Remote CA Management | Bug | Remote CA Installer is Requiring Scope | 
| 55199 | Remote CA Management | Bug | CA Connector API Result page submission being logged as error | 
| 56340 | Remote CA Management | Bug | /CertificateAuthority/CAConnectors and /CertificateAuthority/TaskQueue API Endpoints Not Standardized | 
| 57246 | Remote CA Management | Bug | Enums in CAConnectors endpoints are int, not string | 
| 48467 | Remote CA Management | Product Backlog Item | Update ICertificateAuthorityClient Template Jobs | 
| 52020 | Remote CA Management | Product Backlog Item | JobNotifyHub Connect/Disconnect AuthZ | 
| 52026 | Remote CA Management | Product Backlog Item | CA Connector API AuthZ | 
| 52100 | Remote CA Management | Product Backlog Item | Microsoft ICertificateAuthorityClientFactory implementation | 
| 52359 | Remote CA Management | Product Backlog Item | CA Connector calls into Heartbeat endpoint | 
| 52371 | Remote CA Management | Product Backlog Item | Add job type to log file to make troubleshooting easier | 
| 52725 | Remote CA Management | Product Backlog Item | Add method to return ICertificateAuthorityClient in the CAClientFactory | 
| 52840 | Remote CA Management | Product Backlog Item | Update CA Connector installation to check for .NET 8 | 
| 53271 | Remote CA Management | Product Backlog Item | Add ConnectionId tracking for CA Connectors | 
| 53479 | Remote CA Management | Product Backlog Item | Add Exception handling to CA Connector API | 
| 53491 | Remote CA Management | Product Backlog Item | Implement RabbitMQCAClient Streaming Jobs | 
| 53503 | Remote CA Management | Product Backlog Item | Create POST /Job/{jobID}/ResultPage/{pageNum} endpoint | 
| 53506 | Remote CA Management | Product Backlog Item | CAConnector handles JobStart notification and Failed jobs | 
| 53509 | Remote CA Management | Product Backlog Item | CAClientFactory can build Remote CAs | 
| 53512 | Remote CA Management | Product Backlog Item | Cache CAInfo on CAConnector | 
| 53518 | Remote CA Management | Product Backlog Item | Implement Enroll SimpleJobRunner | 
| 53530 | Remote CA Management | Product Backlog Item | Implement GetCACertificate, GetIssuanceStats, PublishCRL SimpleJobs for HTTPS CAs | 
| 53535 | Remote CA Management | Product Backlog Item | Implement Revoke SimpleJob | 
| 53537 | Remote CA Management | Product Backlog Item | Implement CertSync Streaming Job | 
| 53539 | Remote CA Management | Product Backlog Item | Implement GetAllTemplates and GetCATemplates Streaming Jobs | 
| 53627 | Remote CA Management | Product Backlog Item | Better DNS load balancing support | 
| 53636 | Remote CA Management | Product Backlog Item | Remove GetAll method from CAConnectorDataStore | 
| 53780 | Remote CA Management | Product Backlog Item | CA Connector grid Delete confirmation dialog | 
| 53783 | Remote CA Management | Product Backlog Item | Create CA Connector toggle defaults to Enabled | 
| 53792 | Remote CA Management | Product Backlog Item | Update Heartbeat endpoint URI | 
| 54165 | Remote CA Management | Product Backlog Item | JobQueue Audience field used in Installer | 
| 54290 | Remote CA Management | Product Backlog Item | JobQueue OAuth supports multiple OAuth Identity Provider types | 
| 54322 | Remote CA Management | Product Backlog Item | Remove TooltipTextInput and use the FormFields toolTip | 
| 54402 | Remote CA Management | Product Backlog Item | Update Microsoft Client to use .NET 8 and VS 2022 | 
| 54404 | Remote CA Management | Product Backlog Item | Implement GetCACertificate, GetIssuanceStats, PublishCRL SimpleJobs for DCOM CAs | 
| 54659 | Remote CA Management | Product Backlog Item | JobStart handles undeliverable messages without delay | 
| 54682 | Remote CA Management | Product Backlog Item | CA Connector archive logs are misnamed | 
| 55169 | Remote CA Management | Product Backlog Item | IdP-qualify CA Connector AuthInfo value, API | 
| 55226 | Remote CA Management | Product Backlog Item | SanitizeMessage can be removed from failed Job messages | 
| 55237 | Remote CA Management | Product Backlog Item | Optional Audience param can be used when requesting tokens | 
| 55457 | Remote CA Management | Product Backlog Item | CA Connector handles HTTP 429 on backpressure | 
| 55966 | Remote CA Management | Product Backlog Item | ClientSecret exposed in Linux install script | 
| 56008 | Remote CA Management | Product Backlog Item | Add change_secrets.ps1 PowerShell Script | 
| 46344 | Remote CA Management | Feature | CA Connector API | 
| 46375 | Remote CA Management | Feature | Add Message Queue to Command | 
| 52447 | Remote CA Management | Feature | Streaming Job Backpressure | 
| 53785 | Remote CA Management | Feature | Convert Certificate Authority Dialog to a Sliding Panel | 
| 50128 | Remote CA Management | Bug | CAConnector LastSeen time should be nullable DataTime | 
| 52664 | Remote CA Management | Bug | Unable to change CA Connector CA Type | 
| 54278 | Remote CA Management | Bug | Jobs of unknown type don’t log errors in CA Connector | 
| 54281 | Remote CA Management | Bug | Job Queue Connection Fields Have Editing Quirks | 
| 54785 | Remote CA Management | Bug | IConfiguration precedence in Remote CA Connector is wrong | 
| 55165 | Remote CA Management | Bug | Sporadic failures of Remote CA jobs due to unexpected message sequence | 
| 55522 | Remote CA Management | Bug | Linux CA Connector install script improperly creates the appsettings.json file when the file exists but is empty | 
| 55834 | Remote CA Management | Bug | Could Not Load Assembly mscorlib on Remove CA Connector | 
| 56345 | Remote CA Management | Bug | POST /CertificateAuthority/TaskQueue/Test Mismatch on JobQueueURL Error Reference | 
| 57129 | Remote CA Management | Bug | Remove sorting from Connection Type column in CA grid | 
| 57292 | Remote CA Management | Bug | AuthInfo should be named Claim Value | 
| 48989 | Reporting | Product Backlog Item | Upgrade Logi to v23.3 SP1 for Command v12 | 
| 48196 | Reporting | Feature | Upgrade Logi to v23.3 SP1 for Command v12 | 
| 47718 | Reporting | Bug | Report Manager Schedule Dialog UI Not Sizing Properly | 
| 47721 | Reporting | Bug | PKI Status for Collection Report - Drilling into Report not Working for Unknown Status when Include Unknown is Checked | 
| 52269 | Reporting | Bug | Logi Upgrade v23.3 Drilldowns broken for some charts | 
| 55445 | Reporting | Bug | Update KeyfactorLogo.png File via _SupportFiles | 
| 55662 | Reporting | Bug | Drilldowns with IncludeRevoked and IncludeExpired params in URL not working | 
| 55782 | Reporting | Bug | Expiration Report By Days Total Count - UI vs Exported Reports | 
| 55821 | Reporting | Bug | Debug Embedded Reports - Checkbox is Visible but Debugger Trace Report Icon not on Generated Reports | 
| 56198 | Security | Product Backlog Item | PermissionSets - API, a new Permission Set Query endpoint for querying permission sets given an access control string | 
| 53201 | Security | Product Backlog Item | Refactor SecretsManager to not use DboSqlLoader | 
| 47999 | Security | Bug | Adding a Claim using an AD Claim Type and IdP Provider throws no exception | 
| 48260 | Security | Bug | Switching Permission Sets on Role Add removes Role Name and Description | 
| 51262 | Security | Bug | Editing a security claim refreshes the claims grid | 
| 51574 | Security | Bug | Login with OAuth and Add AD Claims Get Error | 
| 51732 | Security | Bug | Adding a role with only global permission set causes error | 
| 53364 | Security | Bug | Security Roles & Claims - Cant save role permission updates on containers or collections after creation | 
| 51584 | Services | Product Backlog Item | New Key Rotation Alert Workflow Job for Timer Service | 
| 52046 | Services | Product Backlog Item | Standardize Command SAN Types | 
| 52636 | Services | Product Backlog Item | Restructure Alert Builder and Executor for Revocation Monitoring Alerts | 
| 54382 | Services | Product Backlog Item | Update OAuth2ClientCredsHandler to use BearerTokenManager | 
| 51581 | Services | Product Backlog Item | Update Timer Service to Allow for Creation of Expiration Workflow Job | 
| 51587 | Services | Product Backlog Item | New Revocation Monitoring Alert Workflow Job for Timer Service | 
| 51952 | Services | Product Backlog Item | Update Keyfactor.PKI SAN Types | 
| 52601 | Services | Product Backlog Item | Create New Expiration Alert Workflow Job for Timer Service | 
| 53006 | Services | Product Backlog Item | Audit log retention period should be changed to weeks | 
| 55116 | Services | Bug | Error When Opening a PAM Provider with Instance Parameters | 
| 55800 | Services | Bug | TimerService Jobs Not Updating Last Run Time | 
| 56801 | Services | Bug | KeyRotationWorkflows timer service job does not have a scheduled tasks record | 
| 56811 | Services | Bug | Timer Service AgentJobCompletion job is not runnable | 
| 25216 | SSH | Bug | ServerName Undefined on Edit of SSH User | 
| 48697 | Uncategorized | Product Backlog Item | Add a Token Handler to Keyfactor.Common | 
| 54743 | Uncategorized | Product Backlog Item | All historic SAN keys are supported and parsed in one place | 
| 48353 | Uncategorized | Feature | Standardize SAN type keys throughout the product | 
| 48657 | Uncategorized | Feature | Update EULA | 
| 52485 | Uncategorized | Feature | Consolidate Command SQL loaders and datastores | 
| 52660 | Uncategorized | Feature | Remaining NCC Audit Findings (Command v11) | 
| 55014 | Uncategorized | Bug | Timer Service does not release locks for in-process jobs on shutdown | 
| 38350 | Workflow | Product Backlog Item | Add an Info Graphic to explain the workflow types | 
| 48220 | Workflow | Product Backlog Item | Allow users to modify Enrollment step location | 
| 48242 | Workflow | Product Backlog Item | Update Workflow UI to allow addition of Revoke/Enroll steps | 
| 48640 | Workflow | Product Backlog Item | New workflow certificate leaving store | 
| 48644 | Workflow | Product Backlog Item | Querying for new workflow types | 
| 51573 | Workflow | Product Backlog Item | New Expiration Alert Workflow Type | 
| 51582 | Workflow | Product Backlog Item | Expiration Renewal step for Expiration Workflow | 
| 51586 | Workflow | Product Backlog Item | New Revocation Monitoring Workflow Type | 
| 52179 | Workflow | Product Backlog Item | UseWorkflow System Alert for Expiration | 
| 52461 | Workflow | Product Backlog Item | Enroll step should sync results with Command | 
| 52590 | Workflow | Product Backlog Item | Edit workflow definition UI allows editing of multi-part keys | 
| 52594 | Workflow | Product Backlog Item | Certificate store workflow types have additional key part for container | 
| 52824 | Workflow | Product Backlog Item | Expiration Renewal step uses the new Attribute limiting presence in Workflows | 
| 52880 | Workflow | Product Backlog Item | Change workflow Publish button popups to allow for changing the published version | 
| 53032 | Workflow | Product Backlog Item | Update New Formatted Print SANs Token Display Name | 
| 53145 | Workflow | Product Backlog Item | Disable Workflow Definition on Workflow Configuration Page | 
| 53234 | Workflow | Product Backlog Item | Add Field Parser for Workflow Definition Enabled Column | 
| 53367 | Workflow | Product Backlog Item | Extra Certificate Entered/Left Collection tokens | 
| 53523 | Workflow | Product Backlog Item | Update error message when attempting to define a duplicate workflow | 
| 53639 | Workflow | Product Backlog Item | Trim trailing slashes from multipart keys with one part | 
| 53891 | Workflow | Product Backlog Item | Saving or enabling a collection workflow with a changed collection should fail through the API if not forced | 
| 53924 | Workflow | Product Backlog Item | Workflow token parsers need standardized | 
| 36288 | Workflow | Product Backlog Item | Update Message when Workflow Errors | 
| 39031 | Workflow | Product Backlog Item | Validate the Workflow Condition is a Boolean Variable | 
| 48241 | Workflow | Product Backlog Item | Allow users to modify Revocation step location | 
| 48639 | Workflow | Product Backlog Item | New workflow certificate entering store | 
| 48641 | Workflow | Product Backlog Item | New cert store inventory workflows can be created/edited via the UI | 
| 51583 | Workflow | Product Backlog Item | New Key Rotation Workflow Type | 
| 52113 | Workflow | Product Backlog Item | Add index to dbo.CertificateStoreEntriesDiff | 
| 52362 | Workflow | Product Backlog Item | Implement new JSON Object strings for tokens of complex data types | 
| 52593 | Workflow | Product Backlog Item | Workflows engine accepts multi-part keys | 
| 52670 | Workflow | Product Backlog Item | Update ReactFlow to the latest version | 
| 52823 | Workflow | Product Backlog Item | Workflow Step Attribute for Step Number Validation | 
| 52876 | Workflow | Product Backlog Item | Add API endpoint for publishing specific version of workflow definition | 
| 53106 | Workflow | Product Backlog Item | Update Workflow type ToolTip | 
| 53142 | Workflow | Product Backlog Item | Disable Workflow in Workflow Definitions Grid | 
| 53148 | Workflow | Product Backlog Item | Workflow Manager Will Not Start Instance for Disabled Workflow Definition | 
| 53551 | Workflow | Product Backlog Item | Enrollment workflows include tokens to get certificates information | 
| 53638 | Workflow | Product Backlog Item | Better ui validation for containers when adding new cert store workflows | 
| 53892 | Workflow | Product Backlog Item | Saving or enabling a collection workflow with a changed collection should warn the user in the UI | 
| 54366 | Workflow | Product Backlog Item | Workflow Alerts - Configure Workflow Button Added to Edit Alert Dialog | 
| 54381 | Workflow | Product Backlog Item | Ensure OAuthRestRequest Workflow Step Continues to Function with New Bearer Token Logic | 
| 35772 | Workflow | Feature | Revert workflows to older versions | 
| 37852 | Workflow | Feature | Rework Alerts to use Workflows | 
| 41302 | Workflow | Feature | Workflow Definition error message suggestion | 
| 47648 | Workflow | Feature | Workflow UI Updates | 
| 47786 | Workflow | Feature | Enters and Leaves Inventory Workflows | 
| 47996 | Workflow | Feature | Enrollment/Revocation Workflows Updates | 
| 51736 | Workflow | Feature | Improved UX when configuring PowerShell workflows to modify complex data bucket types | 
| 51749 | Workflow | Feature | Hierarchical Workflow Keys for Cert Store Workflows | 
| 52666 | Workflow | Feature | Update ReactFlow to the latest version | 
| 52885 | Workflow | Feature | Disable Workflow of any type | 
| 52888 | Workflow | Feature | Workflows include all the CertificateDetails on Certificate Leaves/Enters Collection | 
| 53289 | Workflow | Feature | Import/migrate alerts to workflow | 
| 53699 | Workflow | Feature | Saving a collection workflow or enabling an existing one with an edited collection should prompt user if there are new unprocessed certificates | 
| 43684 | Workflow | Bug | Missing front end validation on Importing workflow with secret parameters | 
| 46048 | Workflow | Bug | Restarting a CSR Enrollment Workflow adds more SANs | 
| 48764 | Workflow | Bug | Error When Workflow Invoke REST Request Step Use Basic Authentication Without Username/Password | 
| 48961 | Workflow | Bug | Workflow Definitions - Workflow definition is created when the required steps are invalid and not saved | 
| 51329 | Workflow | Bug | Workflow Step selector stuck loading | 
| 52055 | Workflow | Bug | Validation when clicking the UNDO ALL button on a new invalid workflow definition with valid steps | 
| 53358 | Workflow | Bug | Error saving alert workflow after creating a new alert | 
| 53442 | Workflow | Bug | Error When Approving Suspended EnrollmentWorkflow after EnrollStep with Template Needs CA Manager Approval | 
| 53459 | Workflow | Bug | PFX Enrollment Error When Using non-SSL email for RequireApproval Step | 
| 53557 | Workflow | Bug | Grey Out Disable Button for Global Workflow Definitions | 
| 53624 | Workflow | Bug | Version dropdown in Workflow Definition Configure page should include all versions | 
| 53665 | Workflow | Bug | Global Enrollment Workflow Status Message | 
| 53765 | Workflow | Bug | Workflow Definition Copy Loads Incorrect Version Info | 
| 53941 | Workflow | Bug | Ungraceful failure of workflow when given invalid tokens | 
| 53942 | Workflow | Bug | Incorrect Certificate Entered/Left Store Workflow Container Field Placeholder | 
| 54483 | Workflow | Bug | Error When Deleting a Workflow Step | 
| 54904 | Workflow | Bug | PowerShell workflow steps with parameters fail at execution time | 
| 54908 | Workflow | Bug | Workflows cannot be edited if a version other than the last one is published | 
| 54982 | Workflow | Bug | RawCertificate in Enrollment workflows is impacted by Include Chain setting | 
| 55127 | Workflow | Bug | Workflow Tokens for Revocation Monitoring Need Spaces in Display Name | 
| 55132 | Workflow | Bug | Collection Workflow API Failure + Force With Changed Collections Should Occur only when enabled status has positively changed | 
| 55140 | Workflow | Bug | Missing Workflow Type Value for Alert Workflows | 
| 55238 | Workflow | Bug | Error Message on Entering an Invalid Workflow Condition | 
| 56275 | Workflow | Bug | CollectionItemsDiff table using massive amounts of disk space | 
| 56847 | Workflow | Bug | Workflow Versions Counting by Twos | 
| 57316 | Workflow | Bug | /Workflow/Instances/{instanceId}/Restart /Workflow/Instances/{id}/Restart - 500 response when restarting a suspended instance | 
| 57321 | Workflow | Bug | PowerShell and Renew Certificate Expiration and Enrollment Workflows Work for Test, Fail for Timer Job | 
| 58309 | Workflow | Bug | Validation is missing when a workflow definition is added that utilizes an identical key that has been configured in another definition | 
Was this page helpful? Provide Feedback