ManageEngine Key Manager Plus Changelog

What's new in ManageEngine Key Manager Plus 6.6.0

• New Features:
• Private Certificate Authority (CA) / Intermediate CA:
• Key Manager Plus now offers a new feature - Private CA (Intermediate CA) that allows organizations to create and manage their certificates internally. Selected users can sign end-user certificates for internal servers, applications, and services using the intermediate certificate, signed using the root certificate.
• With this feature, organizations can:
• Achieve enhanced security and gain more control over their certificate management process without relying on external CAs.
• Minimize the risk of external threats and improve their overall certificate management process.
• Streamline the process of issuing and revoking certificates while maintaining complete control over their certificate authority, thus ensuring the certificates issued by the organization are trusted and secure, making it easier to manage and monitor all the internal certificates in one central location.
• Jenkins Integration with Key Manager Plus
• Jenkins is an open-source automation server that facilitates Continuous Integration (CI) and Continuous Delivery (CD) of software projects. Key Manager Plus now supports integration with Jenkins which provides SSL certificates support that includes creating CSR, downloading CSR, creating a certificate, and downloading certificates for organizations' freestyle projects during the build generation and post-build process. With this plugin in DevOps, one can attain certificate-related capabilities in the automated schedules run through Jenkins.
• Azure Key Vault - TLS Secrets Management
• Key Manager Plus now allows you to manage the TLS secrets stored in the Secrets of Microsoft Azure Key Vault - a management service offered by Microsoft. Through this integration, users can create (PFX format), renew, and manage the entire lifecycle of SSL/TLS certificates stored in the Secrets of Azure Key Vault via Key Manager Plus by importing them into the Key Manager Plus repository.
• Enhancements:
• From now on, Key Manager Plus supports DNS Made Easy to complete domain control validation while acquiring certificates from public Certificate Authorities, alongside the available DNS support types.
• New RESTful APIs: The following three new REST APIs have been introduced in Key Manager Plus:
• Fetch all SSH Resources - To fetch all SSH resources
• Fetch all Audit Details -To get all the audit details
• Bulk SSL Discovery from a File - Performs resource discovery based on DNS names stored in the files
• Get SSL Vulnerability Count - To get the total number of SSL vulnerabilities
• Previously, the CSRs were signed in REST API using MSCA. From now on, either MSCA or root CA can be used to sign the CSRs, and in addition, the API response will display the certificate serial number for further API-related use.
• From this build onwards, additional field data can be added as a dropdown option by giving the values to be displayed in DropDown Field type in Settings >> Additional Fields.
• From now on, the 'Certificate Details' will show the additional field(s) information related to the SSL certificates in the SSL tab.
• From now on, you can create CSR by importing the KeyStore file from the Key Manager Plus SSL repository instead of exporting them locally and importing them back for CSR creation.
• In addition to the JTDS JDBC driver, Key Manager Plus now supports Microsoft Java Database Connectivity (JDBC) driver to connect to the SQL server, thus enhancing the user's connectivity to the SQL data.
• We have introduced a new global search filter that allows users to search for resources based on their DNS/IP addresses.
• From now on, Key Manager Plus will record all the SSL discoveries performed via public Certificate Authority (CA) integrations from the Audit window.
• We have introduced a new PKCS 8 export type in this release that permits additional exportation capabilities.
• Upgrade:
• We have migrated to the OpenJDK version 1.8.0_372 for the 64-bit supported builds. For the 32-bit build users to use this upgrade seamlessly, please migrate to the 64-bit architecture.
• Note: TLS protocol version 1.2 or higher is required for SQL server connections, as this OpenJDK upgrade disables TLS1.0 and TLS1.1 by default.
• UI Change:
• From this build onwards, the personal key storage of Key Manager Plus will be referred to as 'Key Vault' instead of 'Key Store' to avoid misinterpretation between the internal KeyStores.
• Bug Fixes:
• The revoked status of the certificates was still showing even after the renewal of revoked certificates in MSCA. This issue has been fixed now.
• In builds 6450 and 6500, the mail-server configuration did not get saved properly because of the presence of the '&' character in the mail server fields, which triggered an EXTRA_PARAM_FOUND error in the user interface. This issue has now been fixed.
• An issue that denied the remote connections for machines with OpenSSH version 7 & above using SSH key authentication has been found and fixed.
• Previously, the load balancer discovery schedule failed when specified with a port number during the schedule configuration. This issue has now been fixed.
• From build 6450, for users with the Microsoft 365 GCC High subscription, the mail server settings failed to work using OAUTH, as the OAUTH mail server setting failed to support US-specific subscriptions. The issue is now fixed.
• From build 6210, while signing a CSR with a certificate, SHA256 was being used as the default signature algorithm instead of the signer certificate's signature algorithm. This issue has now been fixed.
• Previously, the Subject Alternate Name that contains a Principal Name faced a parsing issue during the certificate operations. This issue has now been fixed.