DigiCert certificate Discovery issue

[AbdulRahim Shai]

Hello Community,

I have set up DigiCert discovery to scan for certificates but it's giving below error. 

"status" : "GRACEFUL_TERMINATION",
"message" : "Certificate List is Empty - Please check Credentials and Configurations (ca_api_url, ca_api_version, include_cert_status) Failed Condition(s): [(${certificate} : value=) IS NOT EMPTY ]",
"log" :

When I tried to debug it looks like I am not able to make a query to   "/services/v2/order/certificate" As a result it's returning empty results and failing 

Does anyone experience a similar issue? is this happening because of a restriction to the API key? Currently, its view only ie only get request is allowed.  requesting some help. 

Thanks,

AbdulRahim

[Amit Gujarathi]

Hi @AbdulRahim Shai ,
I trust you are doing great.

Based on the information provided, it is possible that the restriction on your API key is causing this problem. If your current API key allows only "GET" requests, it may explain why you are unable to make the necessary query to retrieve the certificate information.

To resolve this, you need to ensure that your API key has the necessary permissions to perform the required operations. Specifically, you should check if your API key has the appropriate permissions to make "POST" requests to the "/services/v2/order/certificate" endpoint.

Please make sure that your API key has the necessary permissions to create or update certificates, as well as retrieve their information. You may need to consult with your system administrator or the relevant team responsible for managing API keys and access permissions.

[AbdulRahim Shai]

Hi Amit,

Thanks for getting back! 

As per Digicert docs below are the restrictions possible : 

So I am a bit confused here because the docs are not clear about having API restrictions. what do you recommend?  

Thanks,

AbdulRahim

[Amanda35]

Hi @AbdulRahim Shai,

We're experiencing the same issue in our instance.

We originally tried setting our API key restriction to view only which resulted in the same "Certificate List is Empty" error. We also tried setting the API restrictions to Orders, Domains, and Organizations but keep getting an empty certificate list error.

Have you had any luck with this issue?

Thanks,
Amanda

[AbdulRahim Shai]

Hi Amanda35,

Good to know I am not alone facing this issue haha.
Well, I am able to make a Get HTTP request using Postman and geting a response. that at least proves the API key is working fine. 

But no luck with the discovery scan after all the debugging planning to take hi support on this.

Let me know if you make progress on this or solve the problem 🙂
Thanks,
AbdulRahim