2 Replies Latest reply on Aug 6, 2018 2:28 PM by kingdwight

Certificate Authority messages to Log Manager

kingdwight Jul 31, 2018 9:37 PM

Hi All,

Has anyone in this forum successfully configured a Windows Certificate Authority to send messages to Log Manager anytime a new certificate has been assigned? I looked to see if it was an event in the Event Viewer of the server but could not find an event that matches with an assignment of a new cert. Does anyone know if this could be logged in Log Manager? Ideally we would like to have a page to monitor to see the latest certs that have been assigned without having to go to the CA every time we need to check.

Thank you.

Re: Certificate Authority messages to Log Manager

jhynds Aug 2, 2018 4:47 AM (in response to kingdwight)

Event ID 4887 seems to be a close match to what you require. As per the linked article, you may need to adjust your audit settings within the CA in order to trigger the events in Windows. From there, you can leverage the Event Log Forwarder to send those events to Log Manager.
1 of 1 people found this helpful
Like (2)

Actions
Re: Certificate Authority messages to Log Manager

kingdwight Aug 6, 2018 2:28 PM (in response to kingdwight)

Hi jhynds,

I followed all the steps outlined in the above links and I finally got it to work. For some reason I had to install Event Log Forwarded twice before it worked correctly but I'm not going to complain since its working. Thanks for the info!!!

One quick follow up question, I'm not sure is possible.... The log doesn't contain the Cetificate Template the CA issued. Is there a way to modify the log so it includes that information?

Thank you once again...
Dwight
Like (0)

Actions

Go to original post