TrueSSOCertificateDomainInfo

TrueSSOCertificateDomainInfo
TrueSSOCertificateDomainInfo

Domain data available to this enrollment server.

JSON Example
{
    "certificate_servers": [
        {
            "certificate_server_name": "pod07-POD07-CA1-CA",
            "certificate_server_network_address": "POD07-CA1.pod07.example.com",
            "certificate_status": "VALID",
            "connection_status": "CONNECTED",
            "connection_status_reason": "string",
            "template_names": [
                "TrueSso2",
                "TrueSso1",
                "TrueSsoTemplate"
            ]
        }
    ],
    "dns_name": "az.example.com",
    "domain_id": "42e47f15-aad0-221a-b231-ea4a3a134ec9",
    "domain_status": "READY",
    "domain_status_reason": "string",
    "enrollment_certificate_status": "VALID",
    "forest_dns_name": "example.com",
    "replication_status": "OK",
    "replication_status_reason": "string",
    "templates": [
        {
            "hash_algorithm": "SHA_256",
            "minimum_key_length": 2048,
            "template_name": "TrueSsoTemplate",
            "template_status": "SUPPORTED_OPTIMAL",
            "template_status_reason": "string",
            "validity_seconds": 36000000000
        }
    ]
}
certificate_servers
Optional

Collection of certificate server data available to this domain.

string
dns_name
Optional

DNS name of the domain.

string
domain_id
Optional

Id of the domain.

string
domain_status
Optional

The status of this domain to the enrollment server.

  • READY: The domain is ready.
  • CREATED: The domain is created.
  • INITIALIZED: The domain is initialized.
  • CONNECTING: The domain is connecting.
  • ASSOCIATED: This domain has been associated with a Forest, but we do not yet have a connection to this domain. We have no means of syncing objects for this forest from this domain, so it may only operate as long as there is another domain in the same forest that we can synchronize with.
  • STOPPING: The domain is stopping. A domain with this status cannot be used in connector creation.
  • FAILED: The domain is failed. A domain with this status cannot be used in connector creation.
  • UNKNOWN: The domain status is unknown. A domain with this status cannot be used in connector creation.
Possible values are : READY, CREATED, INITIALIZED, CONNECTING, ASSOCIATED, STOPPING, FAILED, UNKNOWN,
string
domain_status_reason
Optional

Additional non-localized explanation of the domain status.

string
enrollment_certificate_status
Optional

The status of the enrollment server's certificate for this domain's forest.

  • VALID: A valid enrollment certificate for this domain's forest is installed on the enrollment server.
  • NOT_VALID: No valid enrollment certificate for this domain's forest is installed on the enrollment server, or it may have expired. An enrollment server with this status cannot be used in connector creation.
Possible values are : VALID, NOT_VALID,
string
forest_dns_name
Optional

DNS name of the domain's forest, if any.

string
replication_status
Optional

This domain's forest's replication status with the domain controller.

  • OK: The enrollment server has read the enrollment properties at least once and is successfully able to update them periodically.
  • DEGRADED: The enrollment server has read the enrollment properties at least once, but has not been able to reach a domain controller for some time.
  • PENDING: he enrollment server has not yet read the enrollment properties from a domain controller.
  • FAILED: The enrollment server has read the enrollment properties at least once but either has not been able to reach a domain controller for an extended time or another issue exists. An enrollment server with this status cannot be used in connector creation.
Possible values are : OK, DEGRADED, PENDING, FAILED,
string
replication_status_reason
Optional

Additional non-localized explanation of the replication status.

templates
Optional

Collection of certificate template data available to certificate servers on this domain. Not all certificate servers may have access to all of these templates.