"MicroSoft CA - Certificate Management" pattern - When template_list is not set to All, in some cases, the pattern will fail with the error "Payload was in an unexpected format..." present in Discovery log - Known Error

"MicroSoft CA - Certificate Management" pattern - When template_list is not set to All, in some cases, the pattern will fail with the error "Payload was in an unexpected format..." present in Discovery log Description You may have difficulty getting discovery to work when using template_list for Microsoft CA Discovery after upgrading to Discovery and Service Mapping Patterns v1.6 and above.

Until this issue is fixed in an upcoming release, please follow the workaround below in order to restore functionality to the pattern.

Steps to Reproduce

1. Have Discovery and Service Mapping plugin v1.6+ installed.

2. Configure a template list that contains certificate template names or OIDs

3. Run the pattern, no certificates will be discovered.

Error in discovery log: "Payload was in an unexpected format, the payload will not be processed."

Workaround This problem is currently under review and targeted to be fixed in a future release. Subscribe to this Known Error article to receive notifications when more information will be available.

As a workaround-

1. Navigate to Discovery Patterns > Pattern Designer and open the "MicroSoft CA - Certificate Management" pattern

2. Open the MS CA ID identification section

3. Open step #3 "run certutil command per template/All"

4. Open the EVAL script in the Value of the transform table operation.

5. Locate this line in the script - it is at line #37:

result = wmi.executeCommand('certutil -restrict \\\"certificatetemplate=' + templateArry + '\\\" -gmt -out NotAfter,NotBefore,SerialNumber,PublicKeyAlgorithm,SubjectKeyIdentifier,Organization,OrgUnit,CommonName,State,Locality,EMail,Country,DistinguishedName,certificatetemplate,CertificateHash,disposition,IssuerNameID -seconds -view csv'); 6. Replace line #37 with the following:

result = wmi.executeCommand('certutil -restrict "certificatetemplate='+templateArry+ '" -gmt -out NotAfter,NotBefore,SerialNumber,PublicKeyAlgorithm,SubjectKeyIdentifier,Organization,OrgUnit,CommonName,State,Locality,EMail,Country,DistinguishedName,certificatetemplate,CertificateHash,disposition,IssuerNameID,RequestID -seconds -view csv'); 7. Save and publish the pattern