How is sn_disco_certmgmt_certificate_extension (Certificate Extensions) supposed to be populated?

[Steve Gyure]

We are running Certificate Inventory and Management v.3.3.0.  We are running Certificate discovery schedules against DigiCert (external CA) and Microsoft (internal CA).  We can see that DigiCert discovery appears to be populating rows in the Certificate Extensions table, but cannot figure out why our Microsoft discovery is not.

Processing "New Certificate Tasks" appears to be populating them for Microsoft, but why would the discovery not?

[Sanaya1]

Hello @Steve Gyure & @Soudamini 

I am facing the same issue. For Microsoft CA extension table is not populating. It gives error while we submit the renewal request for any discovered certificate because of missing data in extension table.

How will user submit a renewal request of a discovered certificate?

Do you got any workaround from ServiceNow? Please suggest.

Warm Regards

Santvana Vaid

[Steve Gyure]

Hi Sanaya1,

ServiceNow has acknowledged the issue and is supposed to be working on a fix.

As a workaround, my company just requests a new certificate with the same info as the original and then replaces it when the new one is received.

I have not heard recently on the status of the fix.  But the workaround is getting us by for now.

Steve

[Sanaya1]

Hello @Steve Gyure 

Thank You for your response, does that mean that your team is utilizing the request new certificate catalog form even when this is a renewal request? So they are not utilizing renew certificate form particularly for Microsoft CA?

Appreciate your response.

Warm Regards

Santvana Vaid

[Steve Gyure]

Correct, Santvana.