How to configure which events the Logging Server records
Originally Published: 2002-07-08
Article Number
Applies To
Issue
Configure events to log
Audit administrators' actions
Log administrators? activities
Log end-entities' activities
Resolution
1. On the KCA Administration Console, click the System Configuration Workbench button
2. In the Navigation Area, click Logging Configuration
3. Select the ?Log on Success? and/or the ?Log on Failure? checkbox for each event that you want to log. Available events include:
- Key generation
- Sign an end-entity certificate
- Sign a CA certificate
- Download an end-entity certificate to a client
- Download a CA certificate to a client
- Download a CRL or OCSP signer certificate to a client
- Issue a CRL
- Import a CRL
- Re-sign a certificate
- Create a new CA
- Import a CA certificate from PKCS #12
- Create a new Administrator
- Create a new Vettor
- Update a CA certificate
- OCSP transactions, e.g. requestor details, time of OCSP request, and response status
- Create a CRL or OCSP signer certificate
- Sign a CRL or OCSP signer certificate
- Reinstate a CA certificate
- Suspend a CA certificate
- Revoke a CA certificate
- Reinstate an end-entity certificate
- Suspend an end-entity certificate
- Revoke a certificate
- Revoke a CRL or OCSP signer certificate
- Sign a reverse cross-certificate
- Import a forward cross-certificate
- Revoke a reverse cross-certificate
- Suspend a reverse cross-certificate
- Reinstate a reverse cross-certificate
- Delete a forward cross-certificate
- Download a reverse cross-certificate
Note that the operations a) delete certificate requests and b) delete certificate cannot be logged.
4. Click Save Current Logging Configuration
In the logs, the field "certificate presented:" identifies the Certificate ID (MD5) of the end-entity/administrator that executed the event logged, for example, the Certificate ID of the administrator that signed an end-entity certificate.
Related Articles
RSA Authenticator 4.5 for iOS and Android Quick Start Guide (German) 5Number of Views Monitoring scripts delayed when sent to remote syslog 27Number of Views Log Configuration Parameters 41Number of Views Set the Identity Router Logging Level 38Number of Views Configure Audit Logging in the Cloud Administration Console 168Number of Views
Trending Articles
How to download and install the AFX Server Archive in RSA Identity Governance & Lifecycle RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide The Template ({Connector Template Name}) has missing file content error when creating AFX Connectors in RSA Identity Gover… Downloading RSA Authentication Manager license files or RSA Software token seed records Troubleshooting RSA MFA Agent for Microsoft Windows
Don't see what you're looking for?