Added certificate chain parameter to soft-token task

The soft-token service task got an additional parameter to decide if the whole certificate chain will be added to the Pkcs#12 soft-token or not. Before, the chain was always added, and this is still the default behavior. But with the new parameter, customers can deactivate the chain, so that only the end user certificate will be added to the Pkcs#12.

See the PRIME archive: 3.12.12 - Smart ID Identity Manager (PRIME) for more information.

Card production and card operation process tasks did create wrong card -> certificate object relations if another certificate was already in the BPMN process before the card production was executed. This has been fixed now.

Fixed a performance issue when switching between the main tabs in Identity Manager (PRIME Explorer). In very large environments (lot of runtime data and lots of different configuration items) it could happen that switching between the tabs ("Start", "Search", "In Progress") takes up to 30 seconds. Switching tabs does now also perform well in these scenarios.

Card state change could end in a endless BPMN loop in a certain scenario: state change runs into an error (e.g. invalid transition) on the process level and at the same time a database rollback happens (e.g. due to concurrent read/write). This has been fixed now.

Fixed a security issue in SCEP Registration task: when doing the SCEP registration via PRIME, the plain SCEP registration password, remained in the BPMN process map - immediate cleanup of the map was missing.