Deprecated functionality from Venafi Platform

Summary

This article contains a current list of features that have been removed from shipping versions of Trust Protection Platform. Deprecated features are grouped by the release in which they were removed. This document lists deprecations for all supported versions of Trust Protection Platform, since you might be upgrading from any supported version, and you need to review the deprecated features for ALL versions between your source version and your target version.

Applies To

All versions of Trust Protection Platform.

Venafi Platform 24.3

Cloud Instance Monitoring - Introduced many years ago, this feature never got the traction we were hoping for. It was the ability that if you populated your device objects with your AWS EC2 Instance ID and gave TPP API access to your AWS Account, we would monitor EC2 instances for shut down and automatically revoke certificates and clean-up inventory. This capability has been removed in favor of features like Recycle Bin available now that can automatically delete devices and certificates from your policy tree based on the expiration of certificates.

SQL Server 2012 Deprecation - Venafi Trust Protection Platform is no longer supported on SQL Server 2012. Prior to upgrading to version 24.3, you must upgrade to a higher version of SQL Server, preferably SQL Server 2019 or 2022. In addition, you must set the compatibility level of your database to support a higher version of SQL Server, preferably matching the server's version.

Venafi Platform 24.1

WebSDK Authorization Method involving API Keys (End-of-Support) - The WebSDK authorization method that involves API keys was formally deprecated in Trust Protection Platform 20.2 and will no longer be available in code beginning in 21.3. The "WebSDk" permission that is available on users and groups will no longer be available. The temporary license key introduced in 21.2 will no longer be available.

Venafi Platform 23.3

Windows Administration Console (WinAdmin) - In 23.3, the remaining capabilities in WinAdmin, primarily the managing of HTML email channels and the managing of custom event definitions, has been migrated to MMC Snap-ins that are available on Venafi Servers as well as able to run on administrator workstations (through WebSDK). The overhaul of these capabilities drastically enhances the ease of use while also providing more functionality over existing management of logging and notifications in WinAdmin and WebAdmin.

Heart Beat Events - Although existing in code, Heart Beat Events have not been helpful since 2015, when the Log Server was rearchitected to support multiple log servers running simultaneously for improved load balancing and fault tolerance. Heart Beat Events were originally designed to be able to push notifications outside the system when internal subcomponents failed to run as expected. Since then, statistics counters have been introduced that can give the same level of insight. In 23.3, with the introduction of the message bus (MQTT), the system status and systemstatus REST API endpoints give a more detailed and near real time look into the health of subcomponents.

Venafi Platform 23.1

Reporter - Heartbeat - This event has been deprecated. It was used in the past to signify that the process that triggered automatic report generation was running -- meaning that the absence of this event meant no reports would be run. Scheduling has been modified and reporting heartbeats are obsolete since reports are now triggered by the same system that sends Platform heartbeats.

Secret store associations APIs - The secret store association REST APIs for certificates have been officially deprecated and will no longer work for many certificate-specific associations. Instead, use the certificates REST APIs, which are documented in the Certificates API documentation.

CyberArk Credential Provider - Support for CyberArk 9.8 has been deprecated.

Venafi Platform 22.4

WebSDK Authorization Method involving API keys is deprecated (End-of-Support) - Starting with 22.4 API key authentication for WebSDK is no longer available for authentication. You must use bearer token authentication to interact with the Trust Protection Platform APIs.

Removal of User/About/ pages - In earlier versions of Trust Protection Platform, you could see a user's Loaded UI Plugins and Loaded API Assemblies, which were provided for troubleshooting issues with the Web Console. These pages have been retired and are no longer available.