How to Enable Advanced Logging for Certificate Automation Manager Server

Jun 4, 2024

How to Enable Advanced Logging for Certificate Automation Manager Server

Introduction

This article will guide you through enabling Certificate Automation Manager advanced logging feature. If this is not the solution you are looking for, please search for the solution in the search bar above.
Note: This support article applies to Certificate Automation Manager version 5.x and below. Also, when facing issues to enroll for Certificates, our support staff may require more information to determine the root cause of the problem.

Notice

It is strongly recommended to back up each configuration file before you modify them. The location of each file is detailed later in this article. Certificate Automation Manager functionality can be drastically impacted if these files are incorrectly modified.

Guidelines

Once you are ready, please follow the steps as listed below to enable the advanced logging feature.

1. On the Certificate Automation Manager Server, click the Start Menu and find the Notepad application. Right-click the Notepad, hover over More option and click Run as administrator as shown in the diagram below.
   Note: You need admin privileges to save the modifications applied to the configuration files.

   

2. Click File, click Open…, go to the disk location “C:\Program Files\GlobalSign Certificate Automation Manager\Web\Certificate Automation Manager”, click the “Web.config” file, and click Open.
   Note: Make sure that you have selected “All Files” from the drop-down menu right above the Open button.

   

3. Click Edit, click Replace, fill out the fields with the following information and click Replace All:
   Find what: <add key="DebugWS" value="false" />
   Replace with: <add key="DebugWS" value="true" />

   

4. To enable verbose logging, you will need to fill out the fields with the following information and click Replace All:
   Find what: switchValue="Information"
   Replace with: switchValue="Verbose"
   Find what: switchValue="Error"
   Replace with: switchValue="Verbose"
   Note: There is no Close button, so just click the X on the top right corner of the pop-up window when you are done, and finally save the changes to the file.

5. Open the “Web.config” file located in “C:\Program Files\GlobalSign Certificate Automation Manager\Web\WSTEP” and follow the same instructions from Steps 3 and 4.
   Note: This step is optional and is for debugging Web services-based Certificate enrollment (WSTEP), API requests and responses, as well as most Windows enrollment actions.

6. Open the “Web.config” file located in “C:\Program Files\GlobalSign Certificate Automation Manager\Web\SCEP” and follow the instructions from Steps 3 and 4, but using the following information:
   Find what: <add key="DebugSCEP" value="false"/>>
   Replace with: <add key="DebugSCEP" value="true"/>
   Note: This step is optional and is for debugging SCEP enrollment, API requests and responses, as well as most device enrollment actions.

7. Click Start Menu, type Services and run the Services app.

   

8. Scroll down until you locate the “GlobalSign Certificate Automation Manager Controller Service”, right-click on it, and click Restart.

   

9. When troubleshooting is done, please replace the modified file with the backed up original file in the same file locations. Then, restart the GlobalSign Certificate Automation Manager Controller Service again.