You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When a new app request for enrollment and the existing app receives the notification but doesn't take any action and goes offline.
At this point, when the existing app is restarted and pending enrollments are fetched from the secondary server, the response contains "appName", "deviceName" and "namespaces". The response does not include "encryptedAPKAMSymmetricKey"
To approve an enrollment the encryptedAPKAMSymmetricKey is needed to encrypt the default encryption private key and default self encryption key and send them to server. But the enrollments that are fetched using "enroll:list" does not contain the encryptedAPKAMSymmetricKey.
Steps to reproduce
The enroll:list command does not have encryptedAPKAMSymmetricKey because of which pending enrollment cannot be approved by the approving apps.
Solution
Currently, the encryptedAPKAMSymmetricKey is not encapsulated in the EnrollDataStoreValue class which is used to store the enrollment params in the secondary server.
To fix the issue, include encryptedAPKAMSymmetricKey in the EnrollDataStoreValue and persist in the secondary server. When notify, fetch the value and notify along with the other enrollment params.
The text was updated successfully, but these errors were encountered:
Describe the bug:
To approve an enrollment the encryptedAPKAMSymmetricKey is needed to encrypt the default encryption private key and default self encryption key and send them to server. But the enrollments that are fetched using "enroll:list" does not contain the encryptedAPKAMSymmetricKey.
Steps to reproduce
The enroll:list command does not have encryptedAPKAMSymmetricKey because of which pending enrollment cannot be approved by the approving apps.
Solution
Currently, the encryptedAPKAMSymmetricKey is not encapsulated in the EnrollDataStoreValue class which is used to store the enrollment params in the secondary server.
To fix the issue, include encryptedAPKAMSymmetricKey in the EnrollDataStoreValue and persist in the secondary server. When notify, fetch the value and notify along with the other enrollment params.
The text was updated successfully, but these errors were encountered: