How to configure which events the Logging Server records
Originally Published: 2002-07-08
Article Number
Applies To
Issue
Configure events to log
Audit administrators' actions
Log administrators? activities
Log end-entities' activities
Resolution
1. On the KCA Administration Console, click the System Configuration Workbench button
2. In the Navigation Area, click Logging Configuration
3. Select the ?Log on Success? and/or the ?Log on Failure? checkbox for each event that you want to log. Available events include:
- Key generation
- Sign an end-entity certificate
- Sign a CA certificate
- Download an end-entity certificate to a client
- Download a CA certificate to a client
- Download a CRL or OCSP signer certificate to a client
- Issue a CRL
- Import a CRL
- Re-sign a certificate
- Create a new CA
- Import a CA certificate from PKCS #12
- Create a new Administrator
- Create a new Vettor
- Update a CA certificate
- OCSP transactions, e.g. requestor details, time of OCSP request, and response status
- Create a CRL or OCSP signer certificate
- Sign a CRL or OCSP signer certificate
- Reinstate a CA certificate
- Suspend a CA certificate
- Revoke a CA certificate
- Reinstate an end-entity certificate
- Suspend an end-entity certificate
- Revoke a certificate
- Revoke a CRL or OCSP signer certificate
- Sign a reverse cross-certificate
- Import a forward cross-certificate
- Revoke a reverse cross-certificate
- Suspend a reverse cross-certificate
- Reinstate a reverse cross-certificate
- Delete a forward cross-certificate
- Download a reverse cross-certificate
Note that the operations a) delete certificate requests and b) delete certificate cannot be logged.
4. Click Save Current Logging Configuration
In the logs, the field "certificate presented:" identifies the Certificate ID (MD5) of the end-entity/administrator that executed the event logged, for example, the Certificate ID of the administrator that signed an end-entity certificate.
Related Articles
Log Configuration Parameters 41Number of Views RSA Authenticator 4.5 for iOS and Android Quick Start Guide (German) 5Number of Views Monitoring scripts delayed when sent to remote syslog 26Number of Views Set the Identity Router Logging Level 31Number of Views Configure Audit Logging in the Cloud Administration Console 157Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x
Don't see what you're looking for?