Certificates with Identical Attributes report

The Certificates with Identical Attributes Report shows user, device, and server certificates that share an identical attribute with at least one other certificate. The following certificate attributes can be compared:

  • User Certificates

    • Subject Common Name
    • Subject Email
    • Subject Alternative Name (UPN)
    • Subject Alternative Name (Email)

  • Device Certificates

    • Subject Common Name
    • Subject Alternative Name (DNS)

    • Subject Alternative Name (IP)

  • Server Certificates

    • Subject Common Name
    • Subject Alternative Name (DNS)
    • Subject Alternative Name (IP)
    • Subject Alternative Name (URI)

The Identical Attributes report helps you identify situations where you may inadvertently have two certificates trying to serve the same purpose. For example, when migrating from one CA to another, you want make sure that all certificates issued from the old CA are revoked. Using this report, you could generate a list of certificates with identical attributes.

  1. From the TLS Protect menu bar, click Policy Tree.
  2. In the Reports tree, click Add > Certificates > Certificates With Identical Attributes Report.
  3. Configure the report using the information Certificate with Identical Attributes configuration settings.
Tab Description
Report > Settings
Run Now
Queues the current report with the Reporting Module.
Download

Downloads the most recent run of the current report in the available format.

When the Reporting module runs a report, it archives the latest version of the report in the format designated in the Report object configuration.

To download a report

  1. Click the Download button .
  2. Select the available format.
  3. In the Save Report dialog, browse to where you want to save the report, and then click Save.
Scheduler
Provides a timestamp when the report was last run and an estimate when the report will be run again.
Settings
The Aperture Base URL contains the URL where Aperture is installed. This URL is used for the links in the PDF version in the report.
In the Information to include in report section, each checkbox represents a column on the generated report. Check the box for each attribute you want to include in the report.
Filters
This section provides options on what locations should be searched and what certificate types should be included in the report.
The Only report on the following containers allows you to specify which policy folders to include in the report.
The Include certificates options allow you to specify which types of certificates should be included, and to specify whether certificates in certain states should be included.
The Ignore certificates which are valid less than X days will exclude certificates that are valid for less than the number of days specified.
Certificate Comparison Settings
This section allows you to specify which certificate attributes should be evaluated when running the report.
Customize explanatory text
The values from these fields appear on the report that gets generated.
Report > Setup & Delivery
Report Settings
In this section, you can set the Title/Subect and Description of the report. These values are included in the report.
The Contacts field allows you to specify the contacts for this report.
Content
This report can be delivered in both CSV and PDF format. Check the boxes for the formats that you want the report in.
If you do not want to receive a report if no data is generated, click the Skip delivery if no report data is generated checkbox.
E-Mail Publishing
This section allows you to specify if you want the report emailed, and if so, who the recipients of the email should be. The Email to contact(s) checkbox sends the report to those listed in the Contact(s) field.
Checking the Email to Address(es) box allows you to enter specific email addresses.
Sending emails requires SMTP to be configured.
File Publishing
Enable the Upload report option to have the report uploaded to a specific location.
Report > Schedule

The options in this tab allow you to determine when the report will be generated. You can choose to run the report manually, or you can set up a schedule.

General > Log

Provides a view of all events triggered for the current object.

An administrator must have a minimum of the Read permission to view this tab.
General > Permissions

On the Permissions tab, you select the users or groups to whom you want to grant permissions to the current object. Then, you select which permissions you want the users or groups to have. You can also manage object permissions via parent objects, including the root Platform object or the Trust Protection Platform server object (found in the Platforms tree).

If you configure Permissions in a parent object, those permissions are inherited by all subordinate objects.