Sectigo Certificate Manager 23.10

Sectigo Certificate Manager (SCM) 23.10 will be deployed on October 21th starting at 8:00 UTC. Outage is the normal 6 hours.

Planned Start: October 21, 2023 8:00AM UTC
Expected End: October 21, 2023 2:00PM UTC

Affected Infrastructure

Components: Certificate Issuing Platforms, Certificate Lifecycle Management Platforms
Locations: Public CA, SCM (cert-manager.com), SCM (hard.cert-manager.com), Private CA

Details:

The SCM 23.10 release includes the following enhancements and fixes:

• Next generation Private Key Agent supporting multiple key storage options (local file, Hashicorp Vault, and Azure Key Vault), simplified download authentication, new download formats and static install packages. (SCM-8137)
• New API admin type replacing standard admin with "WS API use only" privilege. This allows for easier identification and management of admins for API usage. (SCM-8163)
• IdP Template admin type has been improved to support multiple templates plus the ability to auto create IdP admins using IdP assertion values such as groups. (SCM-8164)
• New Sectigo Authentication Service admin type supporting external users without the need for a customer controlled IdP. Sectigo Authentication Service supports username/password + 2FA and industry standard passkeys (WebAuthn). By default, this admin type will not be enabled, please contact Sectigo if required. (SCM-8165)
• Simplified IdP admin types to no longer require secondary approval. (SCM-8149)
• Added ability to convert admins between supported types. (SCM-8169)
• New filtering options for admins. (SCM-8149)
• New controls over allowed admin types and visible login page options. (SCM-8167)
• Improved ability to manage the ownership of SSL/Device certificates. The certificates assigned department can be changed along with the requester/approver. (SCM-8171)
• Deleting an admin now offers the ability to reassign their certificates (they are the requester) to another admin. (SCM-8173)
• Improved speed of Public SMIME certificate collection. (SCM-8376)
• Certificate discovered via Network Discovery Scan long ago could not be deleted. (SCM-8433)
• Email address containing some upper-case letters could not be added to notification recipients. (SCM-8403)
• SMIME certificates list could not be exported by RAO or DRAO administrators. (SCM-8401)
• MRAO administrator could not add a MRAO administrator account. (SCM-8384)
• Regular expression set for external requester did not honor case. (SCM-8368)
• Administrator’s role could not be updated in some cases. (SCM-8357)
• Additional domain names added during replacement of a Private SSL certificate were not saved. (SCM-8158)
• The "Enrollment Successful" notification was sometimes sent twice. (SCM-7692)