Certificate Hub 4.2.1 fixes the following bug.

502 status code when selecting Preview CSV for a report (ATEAM-18121)

Certificate Hub can return a 502 status code when exporting a report to CSV. That is, when:

  1. Navigating to Report / Designer.
  2. Selecting the Design action for a report.
  3. Selecting Preview CSV in the menu bar. 

Workaround: 

  1. Log in to the machine hosting the appliance or the Kubernetes deployment.
  2. Run the following command to edit the acm-api configuration file. 
    sudo kubectl edit deployment/acm-api -n certhub
  3. Add -Xmx4g to the JAVA_OPTS setting. 
    env:
    - name: JAVA_OPTS
    value: -Xmx4g
  4. Run the following command to make the changes effective.
    sudo kubectl rollout restart deployment/acm-api -n certhub
  5. Run the following command to edit the scheduler configuration file. 
    run ssudo kubectl edit deployment/scheduler -n certhub
  6. Add -Xmx4g to the JAVA_OPTS setting. 
    env:
    - name: JAVA_OPTS
    value: -Xmx4g
  7. Run the following command to make the changes effective. 
    sudo kubectl rollout restart deployment/scheduler-n certhub

Sectigo CA not supported (ATEAM-18790)

Certificate Hub 4.2.0 does not support requesting certificates from a CA Gateway 3.2.0  instance integrated with a Sectigo CA.

To fix this bug, you must install Certificate Hub 4.2.1 and CA Gateway 3.2.1.

"Weak Hash Algorithm" filter requires resetting before generating a report (ATEAM-18804)

When using the Preview button to export the contents of the Weak Hash Algorithm system report, the generated report file includes more certificates than just those with a weak hash algorithm.

Workaround:

  1. Log in to the user console of Certificate Manager.
  2. Navigate to Report > Designer.
  3. On the report grid, click on Weak Hash Algorithm.
  4. Display the filter menu for the Signing Algorithm column.
  5. Click Clear to remove all the filter settings. 
  6. Click the Update button.
  7. Set again the initial filter configuration: 

    Starts with

    sha1

    Or

    Starts with

    md

  8. Click the Update button.
  9. Click Preview to confirm the generated report only includes certificates matching the filter.