What are caConfigoration and Certificate Authority fields in SendSuccessNotificaton

[igalfsg]

Hi looking at the documentation I see the following fields for send success:

• transactionId - The SCEP Transaction ID
• certificateRequest - DER-encoded PKCS # 10 Certificate Request Base64 encoded as a string
• certThumprint - SHA1 hash of the thumbprint of the provisioned certificate
• certSerialNumber - Serial number of the provisioned certificate
• certExpirationDate - Expiration date of the provisioned certificate. The date time string should be formatted as web UTC time (YYYY-MM-DDThh:mm:ss.sssTZD) ISO 8601.
• certIssuingAuthority - Name of the authority that issued the certificate

However, looking at the example I see the extra fields of "caConfiguration" and "certificateAuthority". What are these values supposed to be?

[ksnagendran]

Does anyone have an answer to the above question?

[towijo]

I'm also wondering and they still seems to be missing in the documentation (https://learn.microsoft.com/sv-se/mem/intune/protect/scep-libraries-apis#integrate-with-intune).

They were added in a PR named "Add revocation info to notify success" (https://github.com/microsoft/Intune-Resource-Access/pull/94/files), which might give some clues, but i would like to have better documentation regarding these parameters and expected values. They seem to be optional as passing null-values are fine.

Also the documentation for "certIssuingAuthority" is a bit underwhelming. Is it an arbitrary name of the authority just for informational purpose? is it the Common Name (CN) or the Issuing CA? is it the full FQDN of the CA? it leaves you wondering what the purpose is and the exact content specification.