@@ -114,10 +114,6 @@ The plugin supports the following standard CRL revocation reasons:
114114| 2 | CA Compromise | Certificate Authority has been compromised |
115115| 3 | Affiliation Changed | Subject's affiliation has changed |
116116| 4 | Superseded | Certificate has been superseded by a new certificate |
117- | 5 | Cessation of Operation | Certificate is no longer needed |
118- | 6 | Certificate Hold | Temporary suspension (use with caution) |
119- | 9 | Privilege Withdrawn | Privileges have been withdrawn |
120- | 10 | AA Compromise | Attribute Authority has been compromised |
121117
122118** Note** : Not all Idnomic PKI configurations support all revocation reasons. Consult your Idnomic administrator for supported reasons in your environment.
123119
@@ -148,25 +144,6 @@ Each certificate template discovered from Idnomic requires configuration when us
148144- Zone names are case-sensitive
149145- Each template can be configured with a different zone if needed
150146
151- ### Configuration Example
152-
153- ** CA Configuration in AnyCA Gateway** :
154- ``` json
155- {
156- "EndpointAddress" : " https://idnomic-pki.example.com:8443/RA/connector.cgi" ,
157- "ClientCertLocation" : " C:\\ Program Files\\ Keyfactor\\ AnyGateway\\ Certificates\\ gateway-client.pfx" ,
158- "ClientCertPassword" : " MySecurePassword123!" ,
159- "Enabled" : true
160- }
161- ```
162-
163- ** Template Configuration** (for each profile):
164- ``` json
165- {
166- "Zone" : " Production"
167- }
168- ```
169-
170147### Gateway Registration Notes
171148
172149- Each defined Certificate Authority in the AnyCA Gateway REST can support one Idnomic CA endpoint
@@ -400,35 +377,7 @@ Each certificate template discovered from Idnomic requires configuration when us
400377
401378---
402379
403- ### Test Case 8: Certificate Revocation - Multiple Reason Codes
404-
405- ** Objective** : Verify that all supported revocation reason codes work correctly.
406-
407- ** Prerequisites** :
408- - Multiple test certificates are available for revocation
409- - CA supports all standard revocation reasons
410-
411- ** Test Steps** :
412- 1 . For each supported reason code (0, 1, 2, 3, 4, 5, 6, 9, 10):
413- - Select a test certificate
414- - Submit revocation with the specific reason code
415- - Verify revocation succeeds
416- 2 . Check CRL for correct reason codes
417-
418- ** Expected Results** :
419- - All revocation requests succeed
420- - Each certificate shows correct revocation reason in CRL
421- - No errors occur for any reason code
422-
423- ** Verification** :
424- - Download and parse CRL from Idnomic PKI
425- - Verify each revoked certificate has correct CRL reason code
426- - Confirm all revocations are logged in both systems
427- - Check that certificates with reason code 6 (Certificate Hold) can be resumed if supported
428-
429- ---
430-
431- ### Test Case 9: Profile Properties Validation
380+ ### Test Case 8: Profile Properties Validation
432381
433382** Objective** : Verify that profile-specific properties are correctly enforced during enrollment.
434383
@@ -454,7 +403,7 @@ Each certificate template discovered from Idnomic requires configuration when us
454403
455404---
456405
457- ### Test Case 10 : Client Certificate Expiration Handling
406+ ### Test Case 9 : Client Certificate Expiration Handling
458407
459408** Objective** : Verify proper error handling when the Gateway client certificate expires or becomes invalid.
460409
@@ -482,89 +431,6 @@ Each certificate template discovered from Idnomic requires configuration when us
482431
483432---
484433
485- ### Test Case 11: Network Connectivity Failure
486-
487- ** Objective** : Verify graceful handling of network connectivity issues to the Idnomic RA connector.
488-
489- ** Prerequisites** :
490- - Ability to simulate network failure (firewall rule, network disconnection, etc.)
491-
492- ** Test Steps** :
493- 1 . Simulate network connectivity loss to RA connector
494- 2 . Attempt enrollment operation
495- 3 . Observe error handling
496- 4 . Restore network connectivity
497- 5 . Retry operation
498-
499- ** Expected Results** :
500- - Operation fails with clear network connectivity error
501- - System does not crash or become unstable
502- - After connectivity restoration, operations succeed
503- - Appropriate timeout handling occurs
504-
505- ** Verification** :
506- - Review error messages for clarity
507- - Check Gateway logs show connection attempt details
508- - Verify timeout values are appropriate
509- - Confirm no memory leaks or resource issues during failure
510-
511- ---
512-
513- ### Test Case 12: Concurrent Enrollment Requests
514-
515- ** Objective** : Verify the Gateway can handle multiple simultaneous enrollment requests.
516-
517- ** Prerequisites** :
518- - CA is properly configured
519- - Multiple test CSRs are available
520- - Load testing capability exists
521-
522- ** Test Steps** :
523- 1 . Submit 10 enrollment requests simultaneously
524- 2 . Monitor all requests to completion
525- 3 . Verify all enrollments succeed or fail appropriately
526-
527- ** Expected Results** :
528- - All requests are processed
529- - No race conditions occur
530- - Certificates are correctly issued for valid requests
531- - System remains stable under load
532-
533- ** Verification** :
534- - Check all requests complete within reasonable time
535- - Verify no certificate duplication occurs
536- - Review Gateway logs for proper request handling
537- - Confirm Idnomic PKI properly queued and processed requests
538- - Validate certificate data integrity for all issued certificates
539-
540- ---
541-
542- ### Test Case 13: Large Certificate Synchronization
543-
544- ** Objective** : Verify Gateway performance when synchronizing large numbers of certificates.
545-
546- ** Prerequisites** :
547- - Idnomic PKI has 1000+ certificates
548- - Adequate system resources available
549-
550- ** Test Steps** :
551- 1 . Trigger full synchronization of large certificate set
552- 2 . Monitor memory usage and performance
553- 3 . Verify synchronization completes successfully
554-
555- ** Expected Results** :
556- - Synchronization completes without timeout
557- - Memory usage remains within acceptable limits
558- - All certificates are synchronized accurately
559- - System remains responsive during sync
560-
561- ** Verification** :
562- - Monitor Gateway memory and CPU usage during sync
563- - Verify certificate count matches Idnomic PKI
564- - Check for any timeout or performance warnings in logs
565- - Validate random sample of synchronized certificates for accuracy
566-
567- ---
568434
569435## Certificate Template Creation Step
570436
0 commit comments