Skip to content

Commit 9348a87

Browse files
Update configuration.md
1 parent 4ef6671 commit 9348a87

1 file changed

Lines changed: 2 additions & 136 deletions

File tree

docsource/configuration.md

Lines changed: 2 additions & 136 deletions
Original file line numberDiff line numberDiff line change
@@ -114,10 +114,6 @@ The plugin supports the following standard CRL revocation reasons:
114114
| 2 | CA Compromise | Certificate Authority has been compromised |
115115
| 3 | Affiliation Changed | Subject's affiliation has changed |
116116
| 4 | Superseded | Certificate has been superseded by a new certificate |
117-
| 5 | Cessation of Operation | Certificate is no longer needed |
118-
| 6 | Certificate Hold | Temporary suspension (use with caution) |
119-
| 9 | Privilege Withdrawn | Privileges have been withdrawn |
120-
| 10 | AA Compromise | Attribute Authority has been compromised |
121117

122118
**Note**: Not all Idnomic PKI configurations support all revocation reasons. Consult your Idnomic administrator for supported reasons in your environment.
123119

@@ -148,25 +144,6 @@ Each certificate template discovered from Idnomic requires configuration when us
148144
- Zone names are case-sensitive
149145
- Each template can be configured with a different zone if needed
150146

151-
### Configuration Example
152-
153-
**CA Configuration in AnyCA Gateway**:
154-
```json
155-
{
156-
"EndpointAddress": "https://idnomic-pki.example.com:8443/RA/connector.cgi",
157-
"ClientCertLocation": "C:\\Program Files\\Keyfactor\\AnyGateway\\Certificates\\gateway-client.pfx",
158-
"ClientCertPassword": "MySecurePassword123!",
159-
"Enabled": true
160-
}
161-
```
162-
163-
**Template Configuration** (for each profile):
164-
```json
165-
{
166-
"Zone": "Production"
167-
}
168-
```
169-
170147
### Gateway Registration Notes
171148

172149
- Each defined Certificate Authority in the AnyCA Gateway REST can support one Idnomic CA endpoint
@@ -400,35 +377,7 @@ Each certificate template discovered from Idnomic requires configuration when us
400377

401378
---
402379

403-
### Test Case 8: Certificate Revocation - Multiple Reason Codes
404-
405-
**Objective**: Verify that all supported revocation reason codes work correctly.
406-
407-
**Prerequisites**:
408-
- Multiple test certificates are available for revocation
409-
- CA supports all standard revocation reasons
410-
411-
**Test Steps**:
412-
1. For each supported reason code (0, 1, 2, 3, 4, 5, 6, 9, 10):
413-
- Select a test certificate
414-
- Submit revocation with the specific reason code
415-
- Verify revocation succeeds
416-
2. Check CRL for correct reason codes
417-
418-
**Expected Results**:
419-
- All revocation requests succeed
420-
- Each certificate shows correct revocation reason in CRL
421-
- No errors occur for any reason code
422-
423-
**Verification**:
424-
- Download and parse CRL from Idnomic PKI
425-
- Verify each revoked certificate has correct CRL reason code
426-
- Confirm all revocations are logged in both systems
427-
- Check that certificates with reason code 6 (Certificate Hold) can be resumed if supported
428-
429-
---
430-
431-
### Test Case 9: Profile Properties Validation
380+
### Test Case 8: Profile Properties Validation
432381

433382
**Objective**: Verify that profile-specific properties are correctly enforced during enrollment.
434383

@@ -454,7 +403,7 @@ Each certificate template discovered from Idnomic requires configuration when us
454403

455404
---
456405

457-
### Test Case 10: Client Certificate Expiration Handling
406+
### Test Case 9: Client Certificate Expiration Handling
458407

459408
**Objective**: Verify proper error handling when the Gateway client certificate expires or becomes invalid.
460409

@@ -482,89 +431,6 @@ Each certificate template discovered from Idnomic requires configuration when us
482431

483432
---
484433

485-
### Test Case 11: Network Connectivity Failure
486-
487-
**Objective**: Verify graceful handling of network connectivity issues to the Idnomic RA connector.
488-
489-
**Prerequisites**:
490-
- Ability to simulate network failure (firewall rule, network disconnection, etc.)
491-
492-
**Test Steps**:
493-
1. Simulate network connectivity loss to RA connector
494-
2. Attempt enrollment operation
495-
3. Observe error handling
496-
4. Restore network connectivity
497-
5. Retry operation
498-
499-
**Expected Results**:
500-
- Operation fails with clear network connectivity error
501-
- System does not crash or become unstable
502-
- After connectivity restoration, operations succeed
503-
- Appropriate timeout handling occurs
504-
505-
**Verification**:
506-
- Review error messages for clarity
507-
- Check Gateway logs show connection attempt details
508-
- Verify timeout values are appropriate
509-
- Confirm no memory leaks or resource issues during failure
510-
511-
---
512-
513-
### Test Case 12: Concurrent Enrollment Requests
514-
515-
**Objective**: Verify the Gateway can handle multiple simultaneous enrollment requests.
516-
517-
**Prerequisites**:
518-
- CA is properly configured
519-
- Multiple test CSRs are available
520-
- Load testing capability exists
521-
522-
**Test Steps**:
523-
1. Submit 10 enrollment requests simultaneously
524-
2. Monitor all requests to completion
525-
3. Verify all enrollments succeed or fail appropriately
526-
527-
**Expected Results**:
528-
- All requests are processed
529-
- No race conditions occur
530-
- Certificates are correctly issued for valid requests
531-
- System remains stable under load
532-
533-
**Verification**:
534-
- Check all requests complete within reasonable time
535-
- Verify no certificate duplication occurs
536-
- Review Gateway logs for proper request handling
537-
- Confirm Idnomic PKI properly queued and processed requests
538-
- Validate certificate data integrity for all issued certificates
539-
540-
---
541-
542-
### Test Case 13: Large Certificate Synchronization
543-
544-
**Objective**: Verify Gateway performance when synchronizing large numbers of certificates.
545-
546-
**Prerequisites**:
547-
- Idnomic PKI has 1000+ certificates
548-
- Adequate system resources available
549-
550-
**Test Steps**:
551-
1. Trigger full synchronization of large certificate set
552-
2. Monitor memory usage and performance
553-
3. Verify synchronization completes successfully
554-
555-
**Expected Results**:
556-
- Synchronization completes without timeout
557-
- Memory usage remains within acceptable limits
558-
- All certificates are synchronized accurately
559-
- System remains responsive during sync
560-
561-
**Verification**:
562-
- Monitor Gateway memory and CPU usage during sync
563-
- Verify certificate count matches Idnomic PKI
564-
- Check for any timeout or performance warnings in logs
565-
- Validate random sample of synchronized certificates for accuracy
566-
567-
---
568434

569435
## Certificate Template Creation Step
570436

0 commit comments

Comments
 (0)