Notification To Top Secret Administrator When IBM Out of Band ACID Completes Certificate Enrollment Process

Products

• Top Secret

Issue/Introduction

When an IBM Out of Band ACID goes through the certificate enrollment process and the REGSTATE on the ACID changes from OPEN to REVIEW, is there a notification sent to the security admin to issue a TSS command to change it to APPROVED?

Environment

Release : 16.0

Resolution

When the user goes through the certificate enrollment process and the REGSTATE changes from OPEN to REVIEW, there is NOT a notification sent to the security admin to issue a TSS command to change it to APPROVED. You could set up a batch job with TSS LIST(ACIDS) DATA(MFA) and run this periodically to see acids with REGSTATE REVIEW.