Red Hat CERTIFICATE SYSTEM 8.0 - RELEASE NOTES Release Note page 26

Red Hat Certificate System 8.0
Bug Number
491438
498299
499014
499052
499291
501299
26
Description
running Red Hat Certificate System upgrade their loca
Server to Red Hat Directory Server 8.0 on the same m
If the TPS server is unavailable, then the Enterprise Se
Client opens a blank screen in security officer mode ra
returning an error message that the server is unreacha
The tokendb.allowedTransitions parameter in t
configuration sets the revocation states that a token ca
assigned. For example, a token can go from a valid sta
permanently lost state.
The tokendb.allowedTransitions parameter can
set to allow a transition from a state where the certifica
permanently revoked back to the active state. Howeve
will not allow a token to go from a permanently revoke
back to active. Even though those operations appear t
successfully, the certificates on that token are still revo
When trying to renew a DRM certificate using the certi
wizard tool in the Java console (pkiconsole), the ce
renewal fails and the DRM crashes.
The console relied on the old policy framework to rene
certificates, but the policy framework was replaced by
profile framework in Certificate System 7.2. Therefore,
renewal feature in the console is broken.
This is related to bug 453501.
If the configured OCSP responder in the RA or TPS ns
file is not the default responder, then NSS attempts to
OCSP signing certificate used by the OCSP, but it inste
an infinite loop attempting to verify the certificate statu
itself.
The e-gate drivers (eginstall.exe) would not instal
on Windows servers, which caused installing the Enter
Security Client to fail on Windows.
The e-gate drivers have been removed from the Windo
Enterprise Security Client packages on Windows to all
client to be installed.
Token operations can cause a large number of uninde
searches to be returned in the instance's internal Direc
logs. An unindexed search shows up in Directory Serv
logs as notes=U.
Unindexed searches are resource-intensive and can a
performance for the Directory Server. However, most o