Skip to main content

Enterprise PKI Manager

Enhancements

Certificate Views - New feature added to the Certificates page that shows pre-defined set of System Views (Account Scope - available for all users in an account), and also allows users to create their own Custom Views (User Scope) that make use of a custom selection of table columns and filters.

Actions that can be performed for both System and Custom views:

  • Set as default → can configure any view as the default, which will be automatically loaded upon visiting the Certificates page

  • Save as new view → can create a new view from the selected view

Actions that can only be performed for Custom views:

  • Update view → can update the current view with new table settings

  • Delete → can delete custom views that are not set as default

Single Seat list and creation page for all Seat Types - New single Seats List page from where all seat types can be viewed and managed, for those seat types that allow a seat to be created.

Note

Unmanaged/Imported/Organization seat types do not support a seat creation flow via the UI.

Bulk action functionality has moved within the Seats List table and is displayed when more than one item is selected in the table. If the bulk action is not applicable to all selected items, a subsequent page is displayed detailing what items can and can not be actioned.

Redesign of main navigation menu items in the Dashboard - Renamed the “Defaults” menu with “Settings”.

Moved the following menu items to a new “Manage” main navigation menu:

  • Templates

  • Profiles

  • Seats

  • Business units

Certificate Template Enhancements for System Administrators New template management functionality that allows System Administrators with the appropriate "Manage Templates" permission to view the template Type and Scope within the Templates List page. All certificate templates are now tagged with a Type and a Scope:

  • Type: can be System or Custom. All current templates are tagged as System.

  • Scope: can be Limited (available to specific accounts, or no accounts) or Unlimited (available to all accounts).

System Administrators with the "Manage Templates" permission can explicitly assign Limited templates to specific accounts.

The following templates have been tagged Limited and will no longer be visible to all customer accounts unless explicitly bound to an account by a System Administrator with the Manage template permission:

  • SEC Infrastructure and SEC Organization templates. For on-premise DigiCert ONE platform deployments where these templates are required, it is the responsibility of the System Administrator to explicitly assign them back to an account.

  • Organizational-based templates: Private Code Signing and External Private CA

Support for QR Codes for enrollment/renewal URLs - Support to configure an email template from within the profile wizard to make use of a QR code that represents the Enrollment/Renewal URLs, alongside (or as a replacement) of the existing HTTPS-based URLs. This can be achieved by selecting a new QR code related variables from the dropdown list inside each email template.

Public-facing web pages enhancements - Enhanced the public-facing web pages used by profiles configured with the “DigiCert Desktop Client” enrollment method to be more friendly, e.g.:

  • Added a sentence under the “Installation certificate” title, for browser keystore flow: “Click on the button below to install your certificate on your browser keystore”

  • Extended the token not plugged in warning message to ask the user to refresh the page or wait until it automatically rechecks (every 5 seconds)

Profile wizard enhancements

  • Single extensions page. Redesign of the Extensions step within the profile wizard to display one drop-down list of extensions available for the template the profile is being created for. Optional extensions can be added and configured by selecting them from the drop-down list, but required extensions will be already selected from the drop-down list available for the customer administrator to view and/or configure.

  • Email configuration and notifications dynamic warnings. Enhanced the email configuration & notifications profile wizard step to provide dynamic warning messages to the Account Administrator when email notifications can not be sent to a recipient (whether the "Requester" or "Other recipients") based on the profile's configuration.

New seat type - Support for a new seat type called Automation that will be used by new forthcoming automation flows (e.g. ACME) for server certificates. DigiCert ONE on-premise customers, please contact your DigiCert representative for details.

Fixes

  • [DOEPM-3332] Missing Additional Authentication Fields section for profiles configured with the “Manual approval” authentication method.

  • [DOEPM-3370] Certificate Delivery option is blank for profiles configured with the DigiCert Cloud Key Escrow option, and for profiles configured with the DigiCert Desktop Client as the enrollment method, the certificate delivery option is not being ‘remembered’ when navigating through the various wizard steps.

  • [DOEPM-3480] Fixed profile cloning issue where some fields were not captured from the original profile and as a workaround, customers were having to edit the cloned profile to update the incorrect configuration items.

In this section: