Skip to content

Inventorying Certs in non-default Location (/certs) #22

@tomgoodmancbc

Description

@tomgoodmancbc

All certs used on all our datapower domains/servers are not in /default/pubcert location. They are all located at /certs. I can successfully inventory any random certs located in /default/pubcert but any attempt to inventory certs in /certs results in:

2026-01-28 14:52:03.1365 16EC0D8B-AA76-4F87-B813-DA95EBF5B166 11405 Keyfactor.Orchestrators.JobExecutors.OrchestratorJobExecutor [Debug] - Finished running job extension for DataPower job with Id '16ec0d8b-aa76-4f87-b813-da95ebf5b166'
2026-01-28 14:52:03.1365 16EC0D8B-AA76-4F87-B813-DA95EBF5B166 11405 Keyfactor.Orchestrators.JobExecutors.OrchestratorJobExecutor [Trace] - Sending completion for DataPower job id 16ec0d8b-aa76-4f87-b813-da95ebf5b166
2026-01-28 14:52:03.1365 16EC0D8B-AA76-4F87-B813-DA95EBF5B166 11405 Keyfactor.Orchestrators.Core.Services.OrchestratorIdService [Debug] - Getting the orchestrator id from the app settings.
2026-01-28 14:52:03.1365 16EC0D8B-AA76-4F87-B813-DA95EBF5B166 11405 Keyfactor.Orchestrators.Core.Http.KeyfactorHttpClient [Trace] - Adding the orchestrator id, '24f8cbad-0001-4957-8e42-c57cf4f01925', to the request headers for session, '566902c8-af9a-426c-a1e0-96c214f74740'.
2026-01-28 14:52:03.1365 16EC0D8B-AA76-4F87-B813-DA95EBF5B166 11405 Keyfactor.Orchestrators.Core.Http.KeyfactorHttpClient [Debug] - Sending request to 'https://capitalbluecross.keyfactorpki.com/KeyfactorAgents/AnyInventory/Complete'
2026-01-28 14:52:03.2204 16EC0D8B-AA76-4F87-B813-DA95EBF5B166 11405 Keyfactor.Orchestrators.JobExecutors.OrchestratorJobExecutor [Info] - The 'DataPower' job with Id '16ec0d8b-aa76-4f87-b813-da95ebf5b166' finished successfully under session '566902c8-af9a-426c-a1e0-96c214f74740'
2026-01-28 14:52:03.2204 16EC0D8B-AA76-4F87-B813-DA95EBF5B166 11405 Keyfactor.Orchestrators.JobExecutors.OrchestratorJobExecutor [Info] - The 'DataPower' job with capability 'CertStores.DataPower.Inventory' and Id '16ec0d8b-aa76-4f87-b813-da95ebf5b166' under session '566902c8-af9a-426c-a1e0-96c214f74740' completed, sent a 'Failure' status and a job completion message of "Unknown Exception Occured In ProcessJob: The remote server returned an error: (400) Bad Request.
at System.Net.HttpWebRequest.GetResponse()
at Keyfactor.Extensions.Orchestrator.DataPower.Client.DataPowerClient.ApiRequestString(String strCall, String strPostUrl, String strMethod, String strQueryString, Boolean bWrite, Boolean bUseToken) in D:\a\ibm-datapower-orchestrator\ibm-datapower-orchestrator\DataPower\Client\DataPowerClient.cs:line 432
at Keyfactor.Extensions.Orchestrator.DataPower.Client.DataPowerClient.ViewCertificates(ViewCryptoCertificatesRequest viewCertificates) in D:\a\ibm-datapower-orchestrator\ibm-datapower-orchestrator\DataPower\Client\DataPowerClient.cs:line 181
at Keyfactor.Extensions.Orchestrator.DataPower.RequestManager.GetCerts(InventoryJobConfiguration config, DataPowerClient apiClient, SubmitInventoryUpdate submitInventory, CertStoreInfo ci) in D:\a\ibm-datapower-orchestrator\ibm-datapower-orchestrator\DataPower\RequestManager.cs:line 1132
at Keyfactor.Extensions.Orchestrator.DataPower.Jobs.Inventory.PerformInventory(InventoryJobConfiguration config, SubmitInventoryUpdate submitInventory) in D:\a\ibm-datapower-orchestrator\ibm-datapower-orchestrator\DataPower\Jobs\Inventory.cs:line 89
at Keyfactor.Extensions.Orchestrator.DataPower.Jobs.Inventory.ProcessJob(InventoryJobConfiguration jobConfiguration, SubmitInventoryUpdate submitInventoryUpdate) in D:\a\ibm-datapower-orchestrator\ibm-datapower-orchestrator\DataPower\Jobs\Inventory.cs:line 54

" to the server, received completion status of 'Success' from the server

I'm using the latest code (v1.1.2 net8.0), but this has been an issue since the previous release. FYI - when using curl to access the correct location, the command is:
curl -k -u 'userid:password' --request GET https://fqn:5554/mgmt/filestore/default/cert

What combination of storepath / public cert storepath values should be used to access certs in /certs ?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions