Entrust Certificate Hub has the following known issues..

Error when taking certificates off hold (ATEAM-1445)

For certificates with Revocation Reason: On Hold, attempting to unhold the certificate may fail, or the Unhold option may be absent from the Actions dropdown.

Issues when changing the display order of custom fields (ATEAM-15463)

In the Custom Fields page of the web console, Certificate Hub administrators can change the display order of the custom fields. However:

  • Reordering a custom field does not change the Display Order column value.
  • Refreshing the Custom Field page reverts all changes.

Workaround: After dragging a custom field to a different position, move the Ξ drag icon within its row to make the changes persistent.

Some endpoint filters display invalid results on report files (ATEAM-15933)

The following endpoint filters do not display correct results on the downloaded report files.

  • is empty
  • is not empty

Certificates without names not synced from source (ATEAM-16039)

Certificates without a name are not successfully synced from Sources.

Out-of-memory error when generating reports with many certificates (ATEAM-16346)

When generating a report containing a large number of certificates, the report generation may fail with an out-of-memory error.

Workaround: Increasing the heap size of the acm-api pod (for report preview) and scheduler pod (for scheduled reports) may fix this issue. A Java Heap Size parameter has been added to the deployment script to allow for manual adjustment of the allocated heap size.

Wildcard certificates not recorded (ATEAM-16436)

Certificate Hub does not record wildcard certificates successfully scanned by the Discovery Scanner.

Wildcard certificates are certificates containing the wildcard asterisk in the issuer and subject. 

'Manage Schedules' option disabled in non-scheduled reports (ATEAM-16910)

If a report does not have a Schedule, the Manage Schedules option is disabled from the Actions dropdown of the Report Designer page.

Buttons language not affected when switching language (ATEAM-16920)

Switching the language before logging in does not affect the language of the Delete and Cancel buttons in the Confirm Delete popup on the Destinations page.

Owner grid column not populated when accessing reports (ATEAM-16923)

The Owner grid column is not populated when accessing the Report Schedules from the Report Designer grid.

Workaround: Access the Report Schedules grid from the navigation bar.

Authorities without authority certificate are not displayed (ATEAM-16930)

The Authorities page does not display authorities missing an authority certificate.

Labels not affected when switching language  (ATEAM-16942)

Switching language in the Report Designer page does not affect the labels of the grid columns.

The Verify button does not always trigger a verification (ATEAM-16950)

After the failed verification of a Destination, clicking Verify again does not trigger a new verification.

Workaround: Make any change in the create form – for example, change the Description.

The public key ID can refer to the private key ID (ATEAM-16982)

When issuing a certificate using the Key Manager (KMIP) destination, the public key ID is also referring to the private key ID

Error when selecting the Domains widget (ATEAM-16986)

When Certificate Hub is licensed with a FIND license, selecting the Domains widget on the Dashboard displays the following error.

Unable to show information: Forbidden. This request is not allowed.

Archive certificates option missing with FIND licenses (ATEAM-16988)

When Certificate Hub is licensed with a FIND license, the option to Archive certificates is missing in the Actions dropdown on the Certificates grid.

Incomplete CA certificate chain (ATEAM-16997)

When creating a new certificate, the downloaded chain only includes the certificate of the CA that issued the new certificate instead of including the entire chain.

Verification fails for IIS destinations (ATEAM-17030)

Verification fails for IIS destinations if the username includes a domain name – for example:

.\user
domain\user

Certificate creation fail (ATEAM-17063)

Certificate creation fails when adding an otherName field to the Subject Alternative Names.

Web server request fails (ATEAM-17070)

Administrator requests for certificate issuance with Apache, Nginx, or IIS destinations fail during the approval process if the administrator performing the approval has only the Approver role.

Workaround: Let a global administrator with the Authority role perform the approval.

Python requirement not documented (ATEAM-17072)

The user guide does not indicate that Python 3.9 or newer is a requirement for Apache and Nginx destinations.

Error message on Kubernetes with an external database (ATEAM-17230)

When installing Certificate Hub on Kubernetes with an external database, you can safely ignore the following error message:

Error from server (NotFound): configmaps "postgres-config" not found