Version: 8.7

Release Date: 2023-01-26

Main new features

This release extends the CM REST API and CM-SDK with new certificate search filters and certificate download formats.

CA certificates searchable

It is now possible to search for CA certificates through the CM-SDK and CM REST API. In CM-SDK the class ListCertificatesRequest and the new certificate search criteria "IncludeAuthorityCerts" and "OnlyAuthorityCerts" can be used for filtering. It is also possible to retrieve CA certificate data using the GetCertificatesRequest. For CM REST API, see Certificate Manager (CM) REST API for more information. 

X.509 certificates searchable with SKI and AKI

It is now possible to search for X.509 certificates with the search criteria "subjectkeyidentifier" and "authoritykeyidentifier" in the CM-SDK request ListCertificatesRequest and CM REST API certificates-endpoint. See Certificate Manager (CM) REST API for more information. 

CM REST API supports extended certificate search criteria

It is now possible to search for certificates with the extended certificate search criteria in the CM REST API certificates-endpoint. See Certificate Manager (CM) REST API for more information. The Extended Certificate Search functionality enables searching for information in the ExtendedCertSearch database table. The table can be used to store custom defined information for identifying certificate holders. See the CM Technical Description for details about ExtendedCertSearch.

CM REST API supports downloading certificates in PEM and PKCS7

CM REST API download endpoint now supports downloading of a certificate or a certificate chain in PEM, PKCS7 or DER format. The format is decided by setting the Accept header in the request to one of the following media types, "application/pkix-cert", "application/pem-certificate-chain" or "application/pkcs7-mime". See Certificate Manager (CM) REST API for more information. 

CM REST API supports delivering certificates in different formats

It is now possible to choose the format of delivered certificate and attribute certificate in pkcs12 and pkcs12-to-attr-cert endpoints. Same as downloading certificates. See Certificate Manager (CM) REST API for more information. 

Changed functionality

Days can be used to configure Delta CRL/CIL margins

In addition to minutes and hours, now days can be used to configure the margin for a Delta CRL or Delta CIL inside their respective procedures in the AWB client. See Create CRL procedure in Certificate Manager and Create CIL procedure in Certificate Manager for more information.

REST API verifies that correct signed data is used with a pkcs10

The REST API now verifies that the correct signed data is used for the pkcs10 sent in a request. This is done by matching the publickeyinfo value from the pkcs10 data with the value from the signed data.

Detailed feature list

For a detailed overview of changed functionality, deprecated functions and corrected problems, see Release.txt which is provided with the installation media.

Contact 

Contact Information

For information regarding support, training and other services in your area, please visit our website at www.nexusgroup.com/. 

Support

Nexus offers maintenance and support services for Nexus Certificate Manager to customers and partners. For more information, please refer to the Nexus Technical Support at www.nexusgroup.com/support/, or contact your local sales representative.