Skip to content

CA Audit Events

Endi S. Dewata edited this page Oct 27, 2023 · 25 revisions

Overview

CA audit events can be configured in log.instance.SignedAudit.events property.

Default Events

Startup Events

There are two types of CAs:

  • the host CA is the primary CA that runs in the CA subsystem

  • Lightweight CA are subordinate CAs under the host CA that are also running in the same CA subsystem

Each of the above CA’s has a unique ID called '''authority ID'''. For host CA, the authority ID can be omitted.

When the PKI server is started, the server will generate signing info logs for each CA to indicate which keys are used for certificate signing, OCSP signing, and CRL signing. When a new lightweight sub-CA is added, the server will also generate the signing info logs for the new sub-CA.

Configuration Events

Certificate Events

CRL Events

OCSP Events

ID Generator Events

Random Number Generator Events

Security Domain Events

  • SECURITY_DOMAIN_UPDATE

Clone this wiki locally