3.2. Listing Certificate Requests

3.2. Listing Certificate Requests

The Certificate Manager keeps a queue of all certificate service requests that have been submitted to it. The queue records whether a request is pending, completed, canceled, or rejected. Three types of requests can be in the queue:

A Certificate Manager agent must review and approve manual enrollment requests. Certificate requests that require review have a status of pending.

To see a list of requests, do the following:

  1. Go to the Certificate Manager agent services page.

    https://server.example.com:9443/ca/agent/ca
    

    NOTE

    An agent much have the proper client certificate to access this page.

  2. Click List Requests to view the queue of certificates requests.

    The List Requests form appears.

    List Requests Form

    Figure 3.2. List Requests Form

  3. View certificate requests request type by selecting one of the options from the Request type menu.

    • Show enrollment requests

    • Show renewal requests

    • Show revocation requests

    • Show all requests

  4. View requests by request status by selecting one of the options in the Request status menu.

    • Show pending requests. These are enrollment requests that have not yet been processed but are waiting for manual review.

    • Show canceled requests. These are requests that have been manually canceled by an agent. Users do not receive automatic notification of canceled requests. Cancellation can be useful if the user has left the company since submitting the request or if the user has already been contacted about a problem and does not need to be notified about the request status.

    • Show rejected requests. These are requests that have been either manually rejected or rejected automatically during profile processing. If the system has been configured to provide automatic notifications to users, a notice is sent to the requester when the request is rejected.

    • Show completed requests. These are requests that have been completed, including issued certificates and completed revocation requests.

    • Show all requests. This shows all requests of the selected type, regardless of status.

  5. To start the list at a specific place in the queue, enter the starting request identifier in decimal or hexadecimal form. Use 0x to indicate a hexadecimal number; for example, 0x2A.

  6. Choose the number of matching requests to be returned. When a number is specified, the system displays that number of certificate requests, beginning with the starting sequence number that matches the specified criteria.

  7. Click Find to display the list of requests that match the specified criteria.

    Request Queue

    Figure 3.3. Request Queue

3.2.1. Selecting a Request

To select a request from the queue, do the following:

  1. On the agent services page, click List Requests, specify search criteria, and click Find to display a list of certificate signing requests.

  2. Select a request to examine from the Request Queue form.

  3. If a desired request not shown, scroll to the bottom of the list, specify an additional number of requests to be listed, and click Find. That number of additional requests matching original search criteria is shown.

  4. When the request has been found, click Details.

  5. The Request Details form appears, showing detailed information about the selected request. Use this form to approve or manage the request.

    Request Details

    Figure 3.4. Request Details

NOTE

If the system changes the state of the displayed request, using the browser's Back or Forward buttons or history to navigate can cause the data display to become out of date. To refresh the data, click the highlighted serial number at the top of the page.

3.2.2. Searching Requests

The Certificate Manager agent interface provides a method for agents to see the request queue based on search criteria other than those described in the List Requests category. These criteria include the following:

  • Searching by Request ID Range. An agent can perform searches on the request queue. To perform searches by request ID range, select the Show requests that fall within the following range option, and enter the lowest and highest request ID.

  • Searching by Request Status. To search by request status, select the Show requests that are of status option, and select the desired request status:

    • Pending

    • Completed

    • Canceled

    • Rejected

    • Any

  • Searching by Request Type. To search by the request type, select the Show requests that are of type option, and select the type of certificate request:

    • Enrollment

    • Renewal

    • Revocation

    • Any

  • Searching by Request Owner. There are to ways to search by the request owner:

    • Search for requests assigned to self

    • Search for requests assigned to a particular agent (based on UID attribute)

Both of the following search constraints apply to any of the search operations:

  • Maximum number of entries to return.

  • Maximum time to use to perform the search.