Merge branch 'ab#82394' of https://github.com/Keyfactor/remote-file-orchestrator into ab#82394

Lee Fine · Lee Fine · commit 11861ddd9ca6 · 2026-06-16T18:41:48.000Z
diff --git a/README.md b/README.md
@@ -1179,10 +1179,7 @@ the Keyfactor Command Portal
 
 <details><summary>Click to expand details</summary>
 
-The `RFORA` store type can be used to manage `PKCS12` Oracle Wallets. 
-
-> NOTE: This should work for `PKCS12` Oracle Wallets installed on both Windows and Linux servers, this has only been tested on wallets installed on Windows.  
-> NOTE: When entering the Store Path for an Oracle Wallet in Keyfactor Command, make sure to INCLUDE the `eWallet.p12` file name that by convention is the name of the `PKCS12` wallet file that gets created.
+The `RFORA` store type can be used to manage `PKCS12` Oracle wallets. Although implemented as a separate store type, Oracle wallets are accessed and managed identically to RFPkcs12 store types.  The file is expected to compatible with the Pkcs#12 standard.
 
 #### Supported use cases
 1. One-to-many trust entries - A trust entry is defined as a single certificate without a private key in a certificate store.  Each trust entry is identified with a custom alias.
@@ -1275,7 +1272,6 @@ the Keyfactor Command Portal
    | LinuxFilePermissionsOnStoreCreation | Linux File Permissions on Store Creation | The LinuxFilePermissionsOnStoreCreation field should contain a three-digit value between 000 and 777 representing the Linux file permissions to be set for the certificate store upon creation. Example: '600' or '755'.  Overrides DefaultLinuxPermissionOnStoreCreation [config.json](#post-installation) setting. | String |  | 🔲 Unchecked |
    | LinuxFileOwnerOnStoreCreation | Linux File Owner on Store Creation | The LinuxFileOwnerOnStoreCreation field should contain a valid user ID recognized by the destination Linux server, optionally followed by a colon and a group ID if the group owner differs. Example: 'userID' or 'userID:groupID'.  Overrides DefaultOwnerOnStoreCreation [config.json](#post-installation) setting. | String |  | 🔲 Unchecked |
    | SudoImpersonatingUser | Sudo Impersonating User | The SudoImpersonatingUser field should contain a valid user ID to impersonate using sudo on the destination Linux server. Example: 'impersonatedUserID'.  Overrides [config.json](#post-installation) DefaultSudoImpersonatedUser setting. | String |  | 🔲 Unchecked |
-   | WorkFolder | Location to use for creation/removal of work files | The WorkFolder field should contain the path on the managed server where temporary work files can be created, modified, and deleted during Inventory and Management jobs. Example: '/path/to/workfolder'. | String |  | ✅ Checked |
    | RemoveRootCertificate | Remove Root Certificate from Chain | Remove root certificate from chain when adding/renewing a certificate in a store. | Bool | False | 🔲 Unchecked |
    | IncludePortInSPN | Include Port in SPN for WinRM | Internally set the -IncludePortInSPN option when creating the remote PowerShell connection. Needed for some Kerberos configurations. | Bool | False | 🔲 Unchecked |
    | SSHPort | SSH Port | Integer value representing the port that should be used when connecting to Linux servers over SSH.  Overrides SSHPort [config.json](#post-installation) setting. | String |  | 🔲 Unchecked |
@@ -1324,13 +1320,6 @@ the Keyfactor Command Portal
    ![RFORA Custom Field - SudoImpersonatingUser](docsource/images/RFORA-custom-field-SudoImpersonatingUser-validation-options-dialog.svg)
 
 
-   ###### Location to use for creation/removal of work files
-   The WorkFolder field should contain the path on the managed server where temporary work files can be created, modified, and deleted during Inventory and Management jobs. Example: '/path/to/workfolder'.
-
-   ![RFORA Custom Field - WorkFolder](docsource/images/RFORA-custom-field-WorkFolder-dialog.svg)
-   ![RFORA Custom Field - WorkFolder](docsource/images/RFORA-custom-field-WorkFolder-validation-options-dialog.svg)
-
-
    ###### Remove Root Certificate from Chain
    Remove root certificate from chain when adding/renewing a certificate in a store.
 
@@ -2009,15 +1998,14 @@ Please refer to the **Universal Orchestrator (remote)** usage section ([PAM prov
    | Category | Select "RFORA" or the customized certificate store name from the previous step. |
    | Container | Optional container to associate certificate store with. |
    | Client Machine | The Client Machine field should contain the DNS name or IP address of the remote orchestrated server for Linux orchestrated servers, formatted as a URL (protocol://dns-or-ip:port) for Windows orchestrated servers, or '1.1.1.1|LocalMachine' for local agents. Example: 'https://myserver.mydomain.com:5986' or '1.1.1.1|LocalMachine' for local access. |
-   | Store Path | The Store Path field should contain the full path and file name of the Oracle Wallet, including the 'eWallet.p12' file name by convention. Example: '/path/to/eWallet.p12' or 'c:\path\to\eWallet.p12'. |
+   | Store Path | The Store Path field should contain the full path and file name of the Oracle Wallet, including the 'eWallet.p12' file name that is generally used by convention. Example: '/path/to/eWallet.p12' or 'c:\path\to\eWallet.p12'. |
    | Store Password | Password used to secure the Certificate Store |
    | Orchestrator | Select an approved orchestrator capable of managing `RFORA` certificates. Specifically, one with the `RFORA` capability. |
    | ServerUsername | A username (or valid PAM key if the username is stored in a KF Command configured PAM integration). If acting as an *agent* using local file access, just check *No Value* |
    | ServerPassword | A password (or valid PAM key if the password is stored in a KF Command configured PAM integration). The password can also be an SSH private key if connecting via SSH to a server using SSH private key authentication. If acting as an *agent* using local file access, just check *No Value* |
    | LinuxFilePermissionsOnStoreCreation | The LinuxFilePermissionsOnStoreCreation field should contain a three-digit value between 000 and 777 representing the Linux file permissions to be set for the certificate store upon creation. Example: '600' or '755'.  Overrides DefaultLinuxPermissionOnStoreCreation [config.json](#post-installation) setting. |
    | LinuxFileOwnerOnStoreCreation | The LinuxFileOwnerOnStoreCreation field should contain a valid user ID recognized by the destination Linux server, optionally followed by a colon and a group ID if the group owner differs. Example: 'userID' or 'userID:groupID'.  Overrides DefaultOwnerOnStoreCreation [config.json](#post-installation) setting. |
    | SudoImpersonatingUser | The SudoImpersonatingUser field should contain a valid user ID to impersonate using sudo on the destination Linux server. Example: 'impersonatedUserID'.  Overrides [config.json](#post-installation) DefaultSudoImpersonatedUser setting. |
-   | WorkFolder | The WorkFolder field should contain the path on the managed server where temporary work files can be created, modified, and deleted during Inventory and Management jobs. Example: '/path/to/workfolder'. |
    | RemoveRootCertificate | Remove root certificate from chain when adding/renewing a certificate in a store. |
    | IncludePortInSPN | Internally set the -IncludePortInSPN option when creating the remote PowerShell connection. Needed for some Kerberos configurations. |
    | SSHPort | Integer value representing the port that should be used when connecting to Linux servers over SSH.  Overrides SSHPort [config.json](#post-installation) setting. |
@@ -2045,15 +2033,14 @@ Please refer to the **Universal Orchestrator (remote)** usage section ([PAM prov
    | Category | Select "RFORA" or the customized certificate store name from the previous step. |
    | Container | Optional container to associate certificate store with. |
    | Client Machine | The Client Machine field should contain the DNS name or IP address of the remote orchestrated server for Linux orchestrated servers, formatted as a URL (protocol://dns-or-ip:port) for Windows orchestrated servers, or '1.1.1.1|LocalMachine' for local agents. Example: 'https://myserver.mydomain.com:5986' or '1.1.1.1|LocalMachine' for local access. |
-   | Store Path | The Store Path field should contain the full path and file name of the Oracle Wallet, including the 'eWallet.p12' file name by convention. Example: '/path/to/eWallet.p12' or 'c:\path\to\eWallet.p12'. |
+   | Store Path | The Store Path field should contain the full path and file name of the Oracle Wallet, including the 'eWallet.p12' file name that is generally used by convention. Example: '/path/to/eWallet.p12' or 'c:\path\to\eWallet.p12'. |
    | Store Password | Password used to secure the Certificate Store |
    | Orchestrator | Select an approved orchestrator capable of managing `RFORA` certificates. Specifically, one with the `RFORA` capability. |
    | Properties.ServerUsername | A username (or valid PAM key if the username is stored in a KF Command configured PAM integration). If acting as an *agent* using local file access, just check *No Value* |
    | Properties.ServerPassword | A password (or valid PAM key if the password is stored in a KF Command configured PAM integration). The password can also be an SSH private key if connecting via SSH to a server using SSH private key authentication. If acting as an *agent* using local file access, just check *No Value* |
    | Properties.LinuxFilePermissionsOnStoreCreation | The LinuxFilePermissionsOnStoreCreation field should contain a three-digit value between 000 and 777 representing the Linux file permissions to be set for the certificate store upon creation. Example: '600' or '755'.  Overrides DefaultLinuxPermissionOnStoreCreation [config.json](#post-installation) setting. |
    | Properties.LinuxFileOwnerOnStoreCreation | The LinuxFileOwnerOnStoreCreation field should contain a valid user ID recognized by the destination Linux server, optionally followed by a colon and a group ID if the group owner differs. Example: 'userID' or 'userID:groupID'.  Overrides DefaultOwnerOnStoreCreation [config.json](#post-installation) setting. |
    | Properties.SudoImpersonatingUser | The SudoImpersonatingUser field should contain a valid user ID to impersonate using sudo on the destination Linux server. Example: 'impersonatedUserID'.  Overrides [config.json](#post-installation) DefaultSudoImpersonatedUser setting. |
-   | Properties.WorkFolder | The WorkFolder field should contain the path on the managed server where temporary work files can be created, modified, and deleted during Inventory and Management jobs. Example: '/path/to/workfolder'. |
    | Properties.RemoveRootCertificate | Remove root certificate from chain when adding/renewing a certificate in a store. |
    | Properties.IncludePortInSPN | Internally set the -IncludePortInSPN option when creating the remote PowerShell connection. Needed for some Kerberos configurations. |
    | Properties.SSHPort | Integer value representing the port that should be used when connecting to Linux servers over SSH.  Overrides SSHPort [config.json](#post-installation) setting. |
diff --git a/docsource/images/RFORA-custom-fields-store-type-dialog.svg b/docsource/images/RFORA-custom-fields-store-type-dialog.svg
@@ -1,5 +1,5 @@
 ﻿<?xml version="1.0" encoding="utf-8"?>
-<svg width="700" height="734" viewBox="0 0 700 734" xmlns="http://www.w3.org/2000/svg">
+<svg width="700" height="696" viewBox="0 0 700 696" xmlns="http://www.w3.org/2000/svg">
   <defs>
     <style>
         text { font-family: 'Segoe UI', Arial, sans-serif; }
@@ -11,7 +11,7 @@
         .tab-active { font-size: 12px; fill: #111111; font-weight: 600; }
     </style>
   </defs>
-  <rect x="0" y="0" width="700" height="734" fill="#ffffff" stroke="#cccccc" stroke-width="1" />
+  <rect x="0" y="0" width="700" height="696" fill="#ffffff" stroke="#cccccc" stroke-width="1" />
   <rect x="0" y="0" width="700" height="44" fill="#f0f0f0" />
   <line x1="0" y1="44" x2="700" y2="44" stroke="#cccccc" stroke-width="1" />
   <text x="16" y="32" class="title">Edit Certificate Store Type</text>
@@ -24,7 +24,7 @@
     <rect x="155" y="77" width="93" height="3" fill="#3355ee" />
     <text x="270" y="68" class="tab-text">Entry Parameters</text>
   </g>
-  <rect x="20" y="96" width="660" height="612" fill="#ffffff" stroke="#d0d0d0" rx="8" />
+  <rect x="20" y="96" width="660" height="574" fill="#ffffff" stroke="#d0d0d0" rx="8" />
   <rect x="21" y="97" width="658" height="8" fill="#f2f2f2" />
   <rect x="21" y="97" width="658" height="42" fill="#f2f2f2" rx="7" />
   <rect x="28" y="104" width="58" height="28" fill="#333333" stroke="#bbbbbb" rx="4" />
@@ -33,7 +33,7 @@
   <text x="123" y="124" text-anchor="middle" fill="#888888" font-size="11" font-family="'Segoe UI', Arial, sans-serif">EDIT</text>
   <rect x="160" y="104" width="70" height="28" fill="#f0f0f0" stroke="#bbbbbb" rx="4" />
   <text x="195" y="124" text-anchor="middle" fill="#888888" font-size="11" font-family="'Segoe UI', Arial, sans-serif">DELETE</text>
-  <text x="670" y="123" text-anchor="end" class="label">Total: 12</text>
+  <text x="670" y="123" text-anchor="end" class="label">Total: 11</text>
   <line x1="20" y1="140" x2="680" y2="140" stroke="#d0d0d0" stroke-width="1" />
   <rect x="21" y="140" width="658" height="32" fill="#f8f8f8" />
   <text x="72" y="162" class="label">Display Name</text>
@@ -89,15 +89,16 @@
   <line x1="284" y1="362" x2="284" y2="400" stroke="#e8e8e8" stroke-width="1" />
   <line x1="444" y1="362" x2="444" y2="400" stroke="#e8e8e8" stroke-width="1" />
   <rect x="34" y="373" width="16" height="16" fill="#ffffff" stroke="#cccccc" rx="3" />
-  <text x="72" y="388" class="value">Location to use for creation/remov...</text>
-  <text x="292" y="388" class="value">String</text>
+  <text x="72" y="388" class="value">Remove Root Certificate from Chain</text>
+  <text x="292" y="388" class="value">Bool</text>
+  <text x="452" y="388" class="value">False</text>
   <rect x="21" y="400" width="658" height="38" fill="#ffffff" />
   <line x1="20" y1="438" x2="680" y2="438" stroke="#e8e8e8" stroke-width="1" />
   <line x1="64" y1="400" x2="64" y2="438" stroke="#e8e8e8" stroke-width="1" />
   <line x1="284" y1="400" x2="284" y2="438" stroke="#e8e8e8" stroke-width="1" />
   <line x1="444" y1="400" x2="444" y2="438" stroke="#e8e8e8" stroke-width="1" />
   <rect x="34" y="411" width="16" height="16" fill="#ffffff" stroke="#cccccc" rx="3" />
-  <text x="72" y="426" class="value">Remove Root Certificate from Chain</text>
+  <text x="72" y="426" class="value">Include Port in SPN for WinRM</text>
   <text x="292" y="426" class="value">Bool</text>
   <text x="452" y="426" class="value">False</text>
   <rect x="21" y="438" width="658" height="38" fill="#f7f7f7" />
@@ -106,42 +107,33 @@
   <line x1="284" y1="438" x2="284" y2="476" stroke="#e8e8e8" stroke-width="1" />
   <line x1="444" y1="438" x2="444" y2="476" stroke="#e8e8e8" stroke-width="1" />
   <rect x="34" y="449" width="16" height="16" fill="#ffffff" stroke="#cccccc" rx="3" />
-  <text x="72" y="464" class="value">Include Port in SPN for WinRM</text>
-  <text x="292" y="464" class="value">Bool</text>
-  <text x="452" y="464" class="value">False</text>
+  <text x="72" y="464" class="value">SSH Port</text>
+  <text x="292" y="464" class="value">String</text>
   <rect x="21" y="476" width="658" height="38" fill="#ffffff" />
   <line x1="20" y1="514" x2="680" y2="514" stroke="#e8e8e8" stroke-width="1" />
   <line x1="64" y1="476" x2="64" y2="514" stroke="#e8e8e8" stroke-width="1" />
   <line x1="284" y1="476" x2="284" y2="514" stroke="#e8e8e8" stroke-width="1" />
   <line x1="444" y1="476" x2="444" y2="514" stroke="#e8e8e8" stroke-width="1" />
   <rect x="34" y="487" width="16" height="16" fill="#ffffff" stroke="#cccccc" rx="3" />
-  <text x="72" y="502" class="value">SSH Port</text>
-  <text x="292" y="502" class="value">String</text>
+  <text x="72" y="502" class="value">Use Shell Commands</text>
+  <text x="292" y="502" class="value">Bool</text>
+  <text x="452" y="502" class="value">True</text>
   <rect x="21" y="514" width="658" height="38" fill="#f7f7f7" />
   <line x1="20" y1="552" x2="680" y2="552" stroke="#e8e8e8" stroke-width="1" />
   <line x1="64" y1="514" x2="64" y2="552" stroke="#e8e8e8" stroke-width="1" />
   <line x1="284" y1="514" x2="284" y2="552" stroke="#e8e8e8" stroke-width="1" />
   <line x1="444" y1="514" x2="444" y2="552" stroke="#e8e8e8" stroke-width="1" />
   <rect x="34" y="525" width="16" height="16" fill="#ffffff" stroke="#cccccc" rx="3" />
-  <text x="72" y="540" class="value">Use Shell Commands</text>
-  <text x="292" y="540" class="value">Bool</text>
-  <text x="452" y="540" class="value">True</text>
+  <text x="72" y="540" class="value">Post Job Application Restart</text>
+  <text x="292" y="540" class="value">MultipleChoice</text>
+  <text x="452" y="540" class="value">None</text>
   <rect x="21" y="552" width="658" height="38" fill="#ffffff" />
   <line x1="20" y1="590" x2="680" y2="590" stroke="#e8e8e8" stroke-width="1" />
   <line x1="64" y1="552" x2="64" y2="590" stroke="#e8e8e8" stroke-width="1" />
   <line x1="284" y1="552" x2="284" y2="590" stroke="#e8e8e8" stroke-width="1" />
   <line x1="444" y1="552" x2="444" y2="590" stroke="#e8e8e8" stroke-width="1" />
   <rect x="34" y="563" width="16" height="16" fill="#ffffff" stroke="#cccccc" rx="3" />
-  <text x="72" y="578" class="value">Post Job Application Restart</text>
-  <text x="292" y="578" class="value">MultipleChoice</text>
-  <text x="452" y="578" class="value">None</text>
-  <rect x="21" y="590" width="658" height="38" fill="#f7f7f7" />
-  <line x1="20" y1="628" x2="680" y2="628" stroke="#e8e8e8" stroke-width="1" />
-  <line x1="64" y1="590" x2="64" y2="628" stroke="#e8e8e8" stroke-width="1" />
-  <line x1="284" y1="590" x2="284" y2="628" stroke="#e8e8e8" stroke-width="1" />
-  <line x1="444" y1="590" x2="444" y2="628" stroke="#e8e8e8" stroke-width="1" />
-  <rect x="34" y="601" width="16" height="16" fill="#ffffff" stroke="#cccccc" rx="3" />
-  <text x="72" y="616" class="value">Requires Legacy Encryption</text>
-  <text x="292" y="616" class="value">Bool</text>
-  <text x="452" y="616" class="value">False</text>
+  <text x="72" y="578" class="value">Requires Legacy Encryption</text>
+  <text x="292" y="578" class="value">Bool</text>
+  <text x="452" y="578" class="value">False</text>
 </svg>
diff --git a/scripts/store_types/bash/curl_create_store_types.sh b/scripts/store_types/bash/curl_create_store_types.sh
@@ -812,15 +812,6 @@ curl -s -X POST "https://${KEYFACTOR_HOSTNAME}/${KEYFACTOR_API_PATH}/Certificate
       "DefaultValue": "",
       "Description": "The SudoImpersonatingUser field should contain a valid user ID to impersonate using sudo on the destination Linux server. Example: 'impersonatedUserID'.  Overrides [config.json](#post-installation) DefaultSudoImpersonatedUser setting."
     },
-    {
-      "Name": "WorkFolder",
-      "DisplayName": "Location to use for creation/removal of work files",
-      "Required": true,
-      "DependsOn": "",
-      "Type": "String",
-      "DefaultValue": "",
-      "Description": "The WorkFolder field should contain the path on the managed server where temporary work files can be created, modified, and deleted during Inventory and Management jobs. Example: '/path/to/workfolder'."
-    },
     {
       "Name": "RemoveRootCertificate",
       "DisplayName": "Remove Root Certificate from Chain",
diff --git a/scripts/store_types/powershell/restmethod_create_store_types.ps1 b/scripts/store_types/powershell/restmethod_create_store_types.ps1
@@ -812,15 +812,6 @@ $Body = @'
       "DefaultValue": "",
       "Description": "The SudoImpersonatingUser field should contain a valid user ID to impersonate using sudo on the destination Linux server. Example: 'impersonatedUserID'.  Overrides [config.json](#post-installation) DefaultSudoImpersonatedUser setting."
     },
-    {
-      "Name": "WorkFolder",
-      "DisplayName": "Location to use for creation/removal of work files",
-      "Required": true,
-      "DependsOn": "",
-      "Type": "String",
-      "DefaultValue": "",
-      "Description": "The WorkFolder field should contain the path on the managed server where temporary work files can be created, modified, and deleted during Inventory and Management jobs. Example: '/path/to/workfolder'."
-    },
     {
       "Name": "RemoveRootCertificate",
       "DisplayName": "Remove Root Certificate from Chain",
