Blank/missing assignment group for certificate task

[Henrik Jutterst]

Background:

We're setting up Certificate Management and using Port-based method via Discovery to collect our certificates.

I see that we have automatically recieved Certificate task(Manual Flow) in sn_disco_certmgmt_certificate_task table, but only a few of them have the assignment_group field populated.

All of our certificates in the Unique Certificates table have the assignment_group filled out, so I can't understand why only a handful of Certificate task have an assignment group.

Picture 01 - All certificates have an assignment group

Picture 02 - Certificate tasks where only a handful of tasks have assignment group

I thought that it might have to do with renewal task property, but the more data that I go through, I doubt that idea.

Picture 03 - OOB Discovery Properties for Cert. mgmt.

Question:

What is setting the Assignment group of Certificate tasks and why do I have tasks without assignment group?

[Bogdan Tomov1]

Hi, can you check if the Cis that have these certificates installed on has assignment group as well? Service now needs to get the correct group from somewhere, I presume that it should be either from the CI or the Certificate itself.

[Henrik Jutterst]

Hi Bogdan and thanks for that thought. I'll have a look and see if you're on to something!

Edit: Sorry. Couldn't find any relation to the CI on the task in either one where the assignment group was set, nor blank. I looked on a couple of them, but they all looked the same unfortunately. But thanks for sharing and trying to help out! If you have any other ideas, feel free to write.

All the best!

[MattSN]

There is a Flow that creates the certificate tasks. I can't recall the name but this should be where the assignment group is retrieved/set.

[Henrik Jutterst]

Hi @MattSN and thank you for clearing this out. With your input I started to list all Flows in [sys_hub_flow] table with the name containing *cert. I then added all the fields to the table list to see where the data is stored and found that the field "Label Cache" contained interesting code-like data.

I then wildcard searched for "assign" to see what showed up and only got one hit:

Fig 01 - Wildcard search

I then opened that subflow and found what is creating these tasks, and when hovering the assignment group field we can see that data comes from: Input -> Certificate CI -> Assignment group:

Fig 02 - Inside the flow where the data is set.

But I don't understand only some of the certification tasks have the assignment group filled in, because all of my certificate CIs have the assignment group filled in...