Hi all,
I am facing an issue with CA Trust Discovery for DigiCert returning an empty certificate list (Certificate List is Empty), and I would appreciate any insights or troubleshooting advice.
Environment & Context
- Discovery Type: CA Trust Discovery (Pattern: DigiCert - Certificate Management)
- Instance A (Working):
- Plugin: Certificate Inventory and Management (CIM) v4.5.0
- Configured with a Windows MID Server. Discovery runs successfully and populates certificates into cmdb_ci_certificate.
- Result discovery:
- Instance B (Failing):
- Plugin: Certificate Inventory and Management (CIM) v4.2.0
- Configured with a Linux MID Server. We migrated all configurations from Instance A to Instance B, and Discovery completes with the result: Certificate List is Empty.
- Result discovery:
What We Have Verified & Tested So Far:
1. Network & API Connectivity from the Linux MID Server:
- We logged into the Linux MID Server host (Instance B) and ran a direct curl command (POST to https://digicert.com with X-DC-DEVKEY).
- Result: The curl command succeeded with 200 OK and returned the full JSON list of certificates. This confirms there is no IP Whitelist restriction on DigiCert's side and the Linux host has outbound internet access.
Question: What are the possible root causes for this issue?
