Events

All events displayed in this document work in a similar manner. In case of failure, the event will display the reason of said failure. This behavior is also valid for warning-status events.

ACME

  • ACME-ACCOUNT-KEY-CHANGE

  • ACME-ACCOUNT-REGISTER
    This event is triggered when an account is unsuccessfully registered. Mainly due to errors in registration parameters (mail, name, …​)

  • ACME-ACCOUNT-UPDATE
    This event is triggered when an account is unsuccessfully updated. Mainly due to errors in updated parameters (mail, name, …​)

  • ACME-AUTHORIZATION-DEACTIVATE
    This event is triggered when an authorization is unsuccessfully deactivated.

  • ACME-CHALLENGE-REQUEST-VERIFY
    This event is triggered when trying to use the challenge feature as an authentication method. It issues a warning if this is not applicable to this authentication case.

  • ACME-CHALLENGE-VERIFY
    This event is triggered when a challenge is used as an authentication method. It issues a warning if the challenge is invalid or if the user doesn’t correspond to the challenge.

  • ACME-ORDER-CERTIFICATE
    This event is triggered when a user tries to access a certificate. It presents a failure in case the user doesn’t have the necessary rights and permissions.

  • ACME-ORDER-FINALIZE
    This event traces the status of the certificate’s status. It presents a failure if the certificate is pending or if is not valid.

  • ACME-ORDER-NEW
    This event is triggered when a user tries to order a certificate. It issues a failure if the user doesn’t have the necessary rights and permissions for requesting this type of new certificate.

  • ACME-ORDER-UPDATE
    This event is triggered when a user tries to order an update on certificate. It issues a failure if the user doesn’t have the necessary rights and permissions to update this type of certificates.

  • ACME-REVOKE
    This event is triggered when Horizon tries revoking a certificate using the ACME protocol. A warning can occur if the certificate is already revoked. A failure can occur if the certificate cannot be found based on the provided thumbprint.

ACTOR

ACTOR
Replaced by PKI-CONNECTOR.

BOOTSTRAP

Bootstrap events relate to the initial setup of the Horizon platform.

  • BOOTSTRAP-ADMINISTRATOR-ACCOUNT
    This event is triggered when installing Horizon, it corresponds to the creation of the administrator local identity on Horizon.

  • BOOTSTRAP-ADMINISTRATOR-PRINCIPAL
    This event is triggered when installing Horizon, it corresponds to the creation of a link between the administrator account and its right.

  • BOOTSTRAP-GRADING-POLICY
    This event is triggered when installing Horizon, it corresponds to the creation of the "Horizon Grading Policy" which itsell contains different grading rulesets.

  • BOOTSTRAP-GRADING-RULESET
    This event is triggered when installing Horizon, it corresponds to the creation of different grading rulesets which are:
    "ANSSI Cryptographic Content",
    "CA/B Forum Ruleset",
    "NIST and ANSSI ECDSA Cryptographic Ruleset",
    "E-Mail Certificate Ruleset",
    "IETF PKIX Ruleset",
    "NIST and ANSSI RSA Cryptographic Ruleset" &
    "TLS Certificate Ruleset".
    For more information about those grading rule sets, click here.

  • BOOTSTRAP-LOCAL-IDENTITY-PROVIDER
    This event is triggered when installing Horizon, it corresponds to the creation of a provider of type Local so that the administrator can connect after startup.

  • BOOTSTRAP-PASSWORD-POLICY
    This event is triggered when installing Horizon, it corresponds to the creation of the Horizon-Default password policy.

  • BOOTSTRAP-SYSTEM-CONFIGURATION
    This event is triggered when installing Horizon, it corresponds to the creation of internal configuration elements such as the CRON internal monitor.

CA

  • CA-CERT-SYNC
    This event is triggered when a Certification Authority is revoked and certificates managed in Horizon are subsequently revoked. The synchronization revokes all the underlying certificates.

  • CA-CRL-UPDATE
    This event is triggered when Horizon tries fetching a CRL from a specified CRLDP.

CONF

CONF EVENTS are triggered when users interact with configuration elements. This includes certificate templates, notification triggers, Certification Authorities…​

  • CONF-ADD
    This event is triggered when a user tries to add a configuration element.

  • CONF-DELETE
    This event is triggered when a user tries to delete a configuration element.

  • CONF-TEST
    This event is triggered when a request of notification happens.

  • CONF-UPDATE
    This event occurs when a user tries to modify a configuration element.

CRMP

  • CRMP-AUTHENTICATION
    This event occurs when a user tries to authenticate. It fails if the authentication is invalide.

  • CRMP-BAD-REQUEST
    This event occurs when a wrong request is issued. For instance if an unavailable action is requested.

  • CRMP-ENROLL
    This event occurs when a enrolling request happens. It fails if the CRMP enrollment is unsuccessful.

  • CRMP-LIST
    This event occurs when a user tries to access the profiles list. Fails if he doesn’t have the required rights and authorisations.

  • CRMP-PROFILE-PROPERTIES
    This event occurs when a user tries to access a profile. Fails if he doesn’t have the required rights and authorisations or if the profile doesn’t exist.

  • CRMP-RECOVER
    This event occurs when a user tries to recover a CRMP. It fails if its not technically possible or if the user doesn’t have the necessary rights and permissions.

  • CRMP-RETRIEVE
    This event occurs when a user tries make a research. It issues a warning if the research field is badly used (empty).

  • CRMP-REVOKE
    This event occurs when a user tries to revoke a certificate. It fails or issues a warning respectively if the user doesn’t have the necessary rights and permissions or if the certificate is expired.

DATASOURCE

  • DATASOURCE-IGNORED
    This event is triggered when a datasource is ignored. For example, when an input is missing.

DISCOVERY

  • DISCOVERY-CAMPAIGN-FLUSH
    This event is triggered when running a Discovery campaign.

EST

  • EST-CACERTS
    This event is triggered when an error occurs during the call to the CACert endpoint when using the EST protocol.

  • EST-REVOKE-ON-RENEW
    This event is triggered when a certificate is revoked following its renewal.

  • EST-SIMPLE-ENROLL
    This event is triggered when enrolling a certificate through the EST protocol.

  • EST-SIMPLE-REENROLL
    This event is triggered when re-enrolling a certificate through the EST protocol.

GRADING

  • GRADING-END
    This event is triggered at the end of the grading process of a certificate.

  • GRADING-ERROR
    This event is triggered if an error occurs while grading a certificate.

  • GRADING-START
    This event is triggered at the beginning of the grading process of a certificate.

INTERNAL-MONITOR

  • INTERNAL-MONITOR-INIT
    This event occurs when a bad initialization of the internal monitor happens. It is a failure case, happening for instance when it is not configured

  • INTERNAL-MONITOR-RUN
    This event occurs when the internal monitor completed successfully.

INVALID-SEAL

  • INVALID-SEAL-PENDING-EVENT
    This event occurs when an invalid seal is pending.

LICENSE

  • LICENSE-ERROR
    This event occurs when an error is related to the License.
    For example, when the license in use is expired.

  • LICENSE-LIMIT-REACHED
    This event is triggered when a limit built into the license is the reached.
    For example, if only one discovery campaign is available, then reaching that threshold will trigger an error saying "Maximum number of discovery campaign(s) reached (x)" where x is the availability threshold.

LIFECYCLE

  • LIFECYCLE-ENROLL
    This event is triggered when a user tries to enroll an end-entity certificate. The event specifies the Distinguished Name of the enrolled certificate, its serial number as well as the Certificate Authority that enrolled said certificate in case of success. In case of failure, the reason of the failure is specified (e.g.: "Unauthorized DN element").

  • LIFECYCLE-ESCROW
    This event is triggered when Horizon tries to escrow a key for an issued certificate.

  • LIFECYCLE-IMPORT
    This event is triggered when trying to import a certificate in Horizon.

  • LIFECYCLE-MAX-CERT-PER-HOLDER
    This event is triggered when an error occurs trying to enforce the max certificates per holder parameter.

  • LIFECYCLE-MIGRATE
    This event is triggered when trying to migrate certificates. This means, making an external certificate managed by Horizon.

  • LIFECYCLE-RECOVER
    This event is triggered Horizon tries to recover a certificate.

  • LIFECYCLE-RENEW
    This event is triggered when Horizon tries to renew a certificate.

  • LIFECYCLE-REVOKE
    This event occurs when a user tries to revoke a certificate.
    Note that no event is triggered when a certificate expires.

  • LIFECYCLE-UPDATE
    This event is triggered when a user tries updating the details related to a certificate. The Labels and the Ownership can be edited.

PKI CONNECTOR

  • PKI-CONNECTOR
    This event is triggered when a PKI connector cannot be properly built between Horizon and the chosen PKI.

REQUEST

  • REQUEST-APPROVE
    This event is triggered when approving a request.

  • REQUEST-CANCEL
    This event is triggered when canceling a request.

  • REQUEST-DENY
    This event is a success when a request is denied.

  • REQUEST-SUBMIT
    This event is triggered when submitting a request.

  • REQUEST-TEMPLATE
    This event is triggered when requesting a template. It can fail when trying to enroll a workflow without a module.

SCEP

  • SCEP-ENROLL
    This event is triggered when enrolling a certificate via SCEP. Fails when missing mandatory certificate’s elements or when missing rights and/or permissions to enroll the certificate.

  • SCEP-GET-CA-CERT
    This event is triggered when requesting a CA certificate via SCEP. Fails when missing mandatory certificate’s elements or when missing rights and/or permissions to enroll the certificate.

  • SCEP-GET-CERT-INITIAL
    This event is triggered when requesting the initial certificate via SCEP. Fails when missing mandatory certificate’s elements or when missing rights and/or permissions to enroll the certificate.

  • SCEP-NDES-EMULATION
    This event requesting a certificate with the scep profile template using the NDES server. It fails if the two don’t comply with one another.

  • SCEP-PKI-CLIENT
    This event is triggered when using the pkiclient profile. It fails if the request is invalid, if the operation is not allow for the type of certificate the user wants to manage, or if the user doesn’t have the necessary rights and permissions to execute the action.

  • SCEP-PKI-OPERATION
    This event is triggered when operating through the PKI.

  • SCEP-RENEW
    This event is triggered when renewing a certificate. It fails he is system fails to enroll the new certificate.

  • SCEP-REVOKE-ON-RENEW
    This event is triggered when revoking a certificate at its renewal.

SCHEDULED-TASK

  • SCHEDULED-TASK-COMPLETE
    This event is triggered when a scheduled task end. It fails if the task fails.

  • SCHEDULED-TASK-RUN
    This event is triggered when trying to pass a scheduled task to "running" status. Fails if this status is not achieved.

SEC

  • SEC-AUTHENTICATION
    This event is triggered when a user tries to connect. The local or OpenID identifier is specified whether it is a failure or a success.

AUTHORIZATION

These events relate to the Security>Access Management>Authorizations tab under configuration.

  • SEC-AUTHORIZATION-ADD
    This event is triggered when a user tries to create a an authorization profile.

  • SEC-AUTHORIZATION-DELETE
    This event is triggered when a user tries to delete an authorization profile.

  • SEC-AUTHORIZATION-UPDATE
    This event is triggered when a user tries to modify elements inside an authorization profile. The event specifies the modified fields.

CREDENTIAL

These events relate to the Security>Credentials tab under configuration.

  • SEC-CREDENTIALS-ADD
    This event occurs when a user tries creating a new Credential.

  • SEC-CREDENTIALS-DELETE
    This event occurs when a user tries deleting a Credential.

  • SEC-CREDENTIALS-UPDATE
    This event occurs when a user tries modifying a Credential.

IDENTITY

These events relate to the Security>Access Management>Identity tab under configuration.

  • SEC-IDENTITY-PROVIDER-ADD
    This event occurs when a user tries creating an identity provider profile.

  • SEC-IDENTITY-PROVIDER-DELETE
    This event occurs when a user tries deleting an identity provider profile.

  • SEC-IDENTITY-PROVIDER-UPDATE
    This event occurs when a user tries modifying an identity provider profile. The modified fields are specified in the event.

LOCAL-IDENTITY

These events relate to the Security>Access Management>Local accounts tab under configuration.

  • SEC-LOCAL-IDENTITY-ADD
    This event is triggered when a user tries creating a local account.

  • SEC-LOCAL-IDENTITY-DELETE
    This event is triggered when a user tries to delete a local account.

  • SEC-LOCAL-IDENTITY-RESET
    This event is triggered when executing the reset password workflow.

  • SEC-LOCAL-IDENTITY-UPDATE
    This event is triggered when a user tries modifying a local account. The modified fields are specified. Updating the password falls in this event.

PASSWORD-POLICY

These events relate to the Security>Password Policies tab under configuration.

  • SEC-PASSWORD-POLICY-ADD
    This event is triggered when a user tries creating a new password policy.

  • SEC-PASSWORD-POLICY-DELETE
    This event is triggered when a user tries deleting a password policy.

  • SEC-PASSWORD-POLICY-UPDATE
    This event is triggered when a user tries modifying a password policy.

ROLE

These events relate to the Security>Access Management>Roles tab under configuration.

  • SEC-ROLE-ADD
    This event is triggered when a user tries to create a new role.

  • SEC-ROLE-DELETE
    This event is triggered when a user tries to delete a role.

  • SEC-ROLE-UPDATE
    This event is triggered when a user tries to modify a role. The modified fields are specified in the event.

SCIM PROFILES

These events relate to the Security>SCIM Profiles tab under configuration.

  • SEC-SCIM-PROFILE-ADD
    This event is triggered when a user tries creating a new SCIM profile.

  • SEC-SCIM-PROFILE-DELETE
    This event is triggered when a user tries deleting a SCIM profile.

  • SEC-SCIM-PROFILE-UPDATE
    This event is triggered when a user tries modifying a SCIM profile.

TEAM

These events relate to the Security>Teams tab under configuration.

  • SEC-TEAM-ADD
    This event is triggered when a user tries creating a team.

  • SEC-TEAM-DELETE
    This event is triggered when a user tries deleting a team.

  • SEC-TEAM-SWITCH

  • SEC-TEAM-UPDATE
    This event is triggered when a user tries modifying a team element (that does not include adding/removing users).

SERVICE

  • SERVICE-START
    This event is triggered when the Horizon service is started.

  • SERVICE-STOP
    This event is triggered when the Horizon service is manually stopped.

SUPERVISOR

SUPERVISOR
This event has been deprecated.

SYNC

  • SYNC-ENROLL
    This event is triggered when syncing an enrollment with a third party.

  • SYNC-RENEW
    This event is triggered when syncing an renewal with a third party.

  • SYNC-REVOKE
    This event is triggered when syncing an revocation with a third party.

TEAM

  • TEAM-SWITCH
    This event is triggered when using the switch workflow.

THIRD-PARTY

  • THIRD-PARTY-CONNECTOR
    This event is triggered as a warning when Horizon cannot build a connection with a third party.

TRIGGER

Trigger events relate to Notifications and can occur based on configurations made under Third Parties or under Protocols.

  • TRIGGER-DELETE
    This event occurs when Horizon tries deleting a certificate within a third party.

  • TRIGGER-EMAIL
    This event occurs when a Trigger that sends an email is activated. The event specifies to whom the email is addressed.

  • TRIGGER-NOTIFICATION
    This event occurs when a Trigger that sends a notification is activated.

  • TRIGGER-PUSH
    This event occurs when Horizon tries to push a certificate to a third party.

  • TRIGGER-REMOVE
    This event occurs when Horizon tries removing a certificate within a third party.

UNSEALED

  • UNSEALED-PENDING-EVENT
    This event is triggered when an event in the pending events collection (in the database) has not been signed.

WCCE

  • WCCE-ENROLL
    This event is triggered when a client tries to enroll a certificate through Horizon using the WCCE protocol.