CA Manager Patch: June 22, 2022

On-demand OCSP - On-premises deployments may now choose on-demand OCSP as an alternative to the default (and recommended) pre-generated responses. Any requests including nonces, will receive a response with that nonce. This option is enabled via the CA Manager Defaults > OCSP page > Responder Generation Settings section.

Response chaining - On-premise users may opt to include the full certificate chain, excluding the root, in OCSP responses. This option is enabled via the CA Manager Defaults > OCSP page > Advanced Settings section. Note that enabling this feature, can impact performance.