Events

All events displayed in this document work in a similar manner. In case of failure, the event will display the reason of said failure. This behavior is also valid for warning-status events.

ACME

  • ACME-ACCOUNT-KEY-CHANGE
    This event is triggered when an account key is updated.

  • ACME-ACCOUNT-REGISTER
    This event is triggered when an account is unsuccessfully registered. Mainly due to errors in registration parameters (mail, name, …​)

  • ACME-ACCOUNT-UPDATE
    This event is triggered when an account is unsuccessfully updated. Mainly due to errors in updated parameters (mail, name, …​)

  • ACME-AUTHORIZATION-DEACTIVATE
    This event is triggered when an authorization is unsuccessfully deactivated.

  • ACME-CHALLENGE-REQUEST-VERIFY
    This event is triggered when trying to use the challenge feature as an authentication method. It issues a warning if this is not applicable to this authentication case.

  • ACME-CHALLENGE-VERIFY
    This event is triggered when a challenge is used as an authentication method. It issues a warning if the challenge is invalid or if the user doesn’t correspond to the challenge.

  • ACME-ORDER-CERTIFICATE
    This event is triggered when a user tries to access a certificate. It presents a failure in case the user doesn’t have the necessary rights and permissions.

  • ACME-ORDER-FINALIZE
    This event traces the status of the certificate’s status. It presents a failure if the certificate is pending or if is not valid.

  • ACME-ORDER-NEW
    This event is triggered when a user tries to order a certificate. It issues a failure if the user doesn’t have the necessary rights and permissions for requesting this type of new certificate.

  • ACME-ORDER-UPDATE
    This event is triggered when a user tries to order an update on certificate. It issues a failure if the user doesn’t have the necessary rights and permissions to update this type of certificates.

  • ACME-REVOKE
    This event is triggered when Horizon tries revoking a certificate using the ACME protocol. A warning can occur if the certificate is already revoked. A failure can occur if the certificate cannot be found based on the provided thumbprint.

ANALYTICS

  • ANALYTICS-CERTIFICATES-FLUSH
    This event occurs when the certificate analytics database is manually flushed.

  • ANALYTICS-DISCOVERY-EVENTS-FLUSH
    This event occurs when the discovery event analytics database is manually flushed.

  • ANALYTICS-EVENTS-FLUSH
    This event occurs when the event analytics database is manually flushed.

BOOTSTRAP

Bootstrap events relate to the initial setup of the Horizon platform.

  • BOOTSTRAP-ADMINISTRATOR-ACCOUNT
    This event is triggered when installing Horizon, it corresponds to the creation of the administrator local identity on Horizon.

  • BOOTSTRAP-ADMINISTRATOR-PRINCIPAL
    This event is triggered when installing Horizon, it corresponds to the creation of a link between the administrator account and its rights.

  • BOOTSTRAP-GRADING-POLICY
    This event is triggered when installing Horizon, it corresponds to the creation of the "Horizon Grading Policy" which itself contains different grading rulesets.

  • BOOTSTRAP-GRADING-RULESET
    This event is triggered when installing Horizon, it corresponds to the creation of different grading rulesets. For more information about those grading rule sets, click here.

  • BOOTSTRAP-LOCAL-IDENTITY-PROVIDER
    This event is triggered when installing Horizon, it corresponds to the creation of a provider of type Local so that the administrator can connect after startup.

  • BOOTSTRAP-PASSWORD-POLICY
    This event is triggered when installing Horizon, it corresponds to the creation of the Horizon-Default password policy.

  • BOOTSTRAP-SYSTEM-CONFIGURATION
    This event is triggered when installing Horizon, it corresponds to the creation of internal configuration elements such as the CRON internal monitor.

CA

  • CA-CERT-SYNC
    This event is triggered when a Certification Authority is revoked and certificates managed in Horizon are subsequently revoked. The synchronization revokes all the underlying certificates.

  • CA-CRL-UPDATE
    This event is triggered when Horizon tries fetching a CRL from a specified CRLDP.

CONF

CONF events are triggered when users interact with configuration elements. This includes certificate templates, notification triggers, Certification Authorities…​

  • CONF-ADD
    This event is triggered when a user tries to add a configuration element.

  • CONF-DELETE
    This event is triggered when a user tries to delete a configuration element.

  • CONF-TEST
    This event is triggered when a notification test happens.

  • CONF-UPDATE
    This event occurs when a user tries to modify a configuration element.

CRMP

  • CRMP-AUTHENTICATION
    This event occurs when a user tries to authenticate. It fails if the authentication is invalid.

  • CRMP-BAD-REQUEST
    This event occurs when a wrong request is issued. For instance if an unavailable action is requested.

  • CRMP-ENROLL
    This event occurs when an enrollment request happens. It fails if the CRMP enrollment is unsuccessful.

  • CRMP-LIST
    This event occurs when a user tries to access the profiles list. Fails if he doesn’t have the required rights and authorisations.

  • CRMP-PROFILE-PROPERTIES
    This event occurs when a user tries to access a profile. Fails if he doesn’t have the required rights and authorisations or if the profile doesn’t exist.

  • CRMP-RECOVER
    This event occurs when a user tries to recover a CRMP certificate. It fails if it is not technically possible or if the user doesn’t have the necessary rights and permissions.

  • CRMP-RETRIEVE
    This event occurs when a user tries to retrieve certificates. It issues a warning if the research field is empty.

  • CRMP-REVOKE
    This event occurs when a user tries to revoke a certificate. It fails or issues a warning respectively if the user doesn’t have the necessary rights and permissions or if the certificate is expired.

DATASOURCE

  • DATASOURCE-IGNORED
    This event occurs when a datasource is not executed because its inputs where not filled. This could indicate a misconfiguration of the datasource flow.

DISCOVERY

  • DISCOVERY-CAMPAIGN-FLUSH
    This event is triggered when running a Discovery campaign.

EST

  • EST-CACERTS
    This event is triggered when an error occurs during the call to the CACert endpoint when using the EST protocol.

  • EST-REVOKE-ON-RENEW
    This event is triggered when enforcing max certificate per holder on the EST protocol.

Deprecated since version 2.4.0

  • EST-SIMPLE-ENROLL
    This event is triggered when enrolling a certificate through the EST protocol.

  • EST-SIMPLE-REENROLL
    This event is triggered when re-enrolling a certificate through the EST protocol.

EVENT COMPLIANCE

  • INVALID-SEAL-PENDING-EVENT
    This event occurs when a pending event has an invalid seal (indicating data corruption in the pending events collection).

  • UNSEALED-PENDING-EVENT
    This event occurs when a pending event has no seal (indicating data corruption in the pending events collection).

GRADING

  • GRADING-END
    This event is triggered at the end of the grading process of a certificate.

  • GRADING-ERROR
    This event is triggered if an error occurs while grading a certificate.

  • GRADING-START
    This event is triggered at the beginning of the grading process of a certificate.

INTERNAL MONITOR

  • INTERNAL-MONITOR-INIT
    This event occurs when a bad initialization of the internal monitor happens. It is a failure case, happening for instance when it is not configured

  • INTERNAL-MONITOR-RUN
    This event occurs when the internal monitor completes successfully.

LICENSE

  • LICENSE-ERROR
    This event occurs when an error is related to the License. For example, when the license in use is expired.

  • LICENSE-LIMIT-REACHED
    This event is triggered when a limit built into the license is the reached. For example, if only one discovery campaign is available, then reaching that threshold will trigger an error saying "Maximum number of discovery campaign(s) reached (x)" where x is the availability threshold.

LIFECYCLE

  • LIFECYCLE-ENROLL
    This event is triggered when a user tries to enroll an end-entity certificate. The event specifies the Distinguished Name of the enrolled certificate, its serial number as well as the Certificate Authority that enrolled said certificate in case of success. In case of failure, the reason of the failure is specified (e.g.: "Unauthorized DN element").

  • LIFECYCLE-ESCROW
    This event is triggered when Horizon tries to escrow a key for an issued certificate.

  • LIFECYCLE-IMPORT
    This event is triggered when trying to import a certificate in Horizon. Import here is the use of the import workflow.

  • LIFECYCLE-MAX-CERT-PER-HOLDER
    This event is triggered when an error occurs trying to enforce the max certificates per holder parameter.

  • LIFECYCLE-MIGRATE
    This event is triggered when trying to migrate certificates. This means taking under Horizon management a discovered certificate.

  • LIFECYCLE-RECOVER
    This event is triggered when a user tries to recover a certificate.

  • LIFECYCLE-RENEW
    This event is triggered when Horizon tries to renew a certificate.

  • LIFECYCLE-REVOKE
    This event occurs when a user tries to revoke a certificate. Note that no event is triggered when a certificate expires.

  • LIFECYCLE-UPDATE
    This event is triggered when a user tries updating the details related to a certificate. The Labels and the Ownership can be edited.

PKI CONNECTOR

  • ACTOR
    This event is triggered when a PKI connector cannot be properly built between Horizon and the chosen PKI.

Deprecated since version 2.4.0

  • PKI-CONNECTOR
    This event is triggered when a PKI connector cannot be properly built between Horizon and the chosen PKI.

REQUEST

  • REQUEST-APPROVE
    This event is triggered when approving a request.

  • REQUEST-CANCEL
    This event is triggered when cancelling a request.

  • REQUEST-DENY
    This event is triggered when a request is denied.

  • REQUEST-SUBMIT
    This event is triggered when submitting a request.

  • REQUEST-TEMPLATE
    This event is triggered when requesting a template. It can fail when trying to enroll a workflow without a module.

SCEP

  • SCEP-ENROLL
    This event is triggered when enrolling a certificate via SCEP. Fails when missing mandatory certificate’s elements or when missing rights and/or permissions to enroll the certificate.

  • SCEP-GET-CA-CERT
    This event is triggered when requesting a CA certificate via SCEP. Fails when missing mandatory certificate’s elements or when missing rights and/or permissions to enroll the certificate.

  • SCEP-GET-CERT-INITIAL
    This event is triggered when requesting the initial certificate via SCEP. Fails when missing mandatory certificate’s elements or when missing rights and/or permissions to enroll the certificate.

  • SCEP-GET-RA
    This event is triggered when the Horizon API Gateway retrieves a SCEP Registration authority for validation. It fails if an unexpected error happens during the process.

  • SCEP-NDES-EMULATION
    This event is triggered when requesting a certificate with the scep profile template using the NDES server. It fails if the two don’t comply with one another.

  • SCEP-PKI-CLIENT
    This event is triggered when using the pkiclient profile. It fails if the request is invalid, if the operation is not allow for the type of certificate the user wants to manage, or if the user doesn’t have the necessary rights and permissions to execute the action.

  • SCEP-PKI-OPERATION
    This event is triggered when operating through the PKI.

  • SCEP-RENEW
    This event is triggered when renewing a certificate. It fails he is system fails to enroll the new certificate.

  • SCEP-REVOKE-ON-RENEW
    This event is triggered when enforcing max certificate per holder on the SCEP protocol.

Deprecated since version 2.4.0

SCHEDULED TASK

  • SCHEDULED-TASK-COMPLETE
    This event is triggered when a scheduled task end. It fails if the task fails.

  • SCHEDULED-TASK-RUN
    This event is triggered when trying to pass a scheduled task to "running" status. Fails if this status is not achieved.

SECURITY

  • SEC-AUTHENTICATION
    This event is triggered when a user tries to connect. The local or OpenID identifier is specified whether it is a failure or a success

AUTHORIZATION

These events relate to the Security>Access Management>Authorizations tab under configuration.

  • SEC-AUTHORIZATION-ADD
    This event is triggered when a user tries to create a an authorization profile.

  • SEC-AUTHORIZATION-DELETE
    This event is triggered when a user tries to delete an authorization profile.

  • SEC-AUTHORIZATION-UPDATE
    This event is triggered when a user tries to modify elements inside an authorization profile. The event specifies the modified fields.

CREDENTIALS

These events relate to the Security>Credentials tab under configuration.

  • SEC-CREDENTIALS-ADD
    This event occurs when a user tries creating new credentials.

  • SEC-CREDENTIALS-DELETE
    This event occurs when a user tries deleting credentials.

  • SEC-CREDENTIALS-UPDATE
    This event occurs when a user tries updating credentials.

IDENTITY

These events relate to the Security>Access Management>Identity tab under configuration.

  • SEC-IDENTITY-PROVIDER-ADD
    This event occurs when a user tries creating an identity provider profile.

  • SEC-IDENTITY-PROVIDER-DELETE
    This event occurs when a user tries deleting an identity provider profile.

  • SEC-IDENTITY-PROVIDER-UPDATE
    This event occurs when a user tries modifying an identity provider profile. The modified fields are specified in the event.

LOCAL IDENTITY

These events relate to the Security>Access Management>Local accounts tab under configuration.

  • SEC-LOCAL-IDENTITY-ADD
    This event is triggered when a user tries creating a local account.

  • SEC-LOCAL-IDENTITY-DELETE
    This event is triggered when a user tries to delete a local account.

  • SEC-LOCAL-IDENTITY-RESET
    This event is triggered when executing the reset password workflow.

  • SEC-LOCAL-IDENTITY-UPDATE
    This event is triggered when a user tries modifying a local account. The modified fields are specified. Updating the password falls in this event.

PASSWORD POLICY

These events relate to the Security>Password Policies tab under configuration.

  • SEC-PASSWORD-POLICY-ADD
    This event is triggered when a user tries creating a new password policy.

  • SEC-PASSWORD-POLICY-DELETE
    This event is triggered when a user tries deleting a password policy.

  • SEC-PASSWORD-POLICY-UPDATE
    This event is triggered when a user tries modifying a password policy.

ROLE

These events relate to the Security>Access Management>Roles tab under configuration.

  • SEC-ROLE-ADD
    This event is triggered when a user tries to create a new role.

  • SEC-ROLE-DELETE
    This event is triggered when a user tries to delete a role.

  • SEC-ROLE-UPDATE
    This event is triggered when a user tries to modify a role. The modified fields are specified in the event.

SCIM PROFILE

These events relate to the Security>SCIM Profiles tab under configuration.

  • SEC-SCIM-PROFILE-ADD
    This event is triggered when a user tries creating a new SCIM profile.

  • SEC-SCIM-PROFILE-DELETE
    This event is triggered when a user tries deleting a SCIM profile.

  • SEC-SCIM-PROFILE-UPDATE
    This event is triggered when a user tries modifying a SCIM profile.

TEAM

These events relate to the Security>Teams tab under configuration.

  • SEC-TEAM-ADD
    This event is triggered when a user tries creating a team.

  • SEC-TEAM-DELETE
    This event is triggered when a user tries deleting a team.

  • SEC-TEAM-SWITCH
    This event is triggered when using the team switch feature (renaming team).

  • SEC-TEAM-UPDATE
    This event is triggered when a user tries modifying a team element (that does not include adding/removing users).

  • TEAM-SWITCH
    This event is triggered when using the team switch feature (renaming team).

Deprecated since version 2.4.0

SERVICE

  • SERVICE-START
    This event is triggered when the Horizon service is started.

  • SERVICE-STOP
    This event is triggered when the Horizon service is manually stopped.

SYNC

Synchronization events are triggered by scheduled task when synchronizing a third party connector state with Horizon

  • SYNC-ENROLL
    This event is triggered when syncing with a third party triggers an enrollment.

  • SYNC-RENEW
    This event is triggered when syncing with a third party triggers a renewal.

  • SYNC-REVOKE
    This event is triggered when syncing with a third party triggers a revocation.

THIRD PARTY

  • THIRD-PARTY-CONNECTOR
    This event is triggered as a warning when Horizon cannot build a connection with a third party.

TRIGGER

Trigger events relate to Notifications and can occur based on configurations made under Third Parties or under Protocols.

  • TRIGGER-DELETE
    This event occurs when Horizon tries deleting a certificate from a third party.

  • TRIGGER-EMAIL
    This event occurs when a Trigger that sends an email is activated. The event specifies to whom the email is addressed.

  • TRIGGER-NOTIFICATION
    This event occurs when a Trigger that sends a notification is activated.

  • TRIGGER-PUSH
    This event occurs when Horizon tries to push a certificate to a third party.

  • TRIGGER-REMOVE
    This event occurs when Horizon orders a third party to remove a certificate.

WCCE

  • WCCE-ENROLL
    This event is triggered when a client tries to enroll a certificate through Horizon using the WCCE protocol.