Home
PKI+
Provision, govern and scale private trust certificates with a Post Quantum ready cloud based Enterprise PKI-as-a-Service.
PKI+ User Guide
Troubleshooting

CERT+
Automate certificate lifecycle management including issuance, discovery, renewal, and deployment, across public and private trust CAs. Assess, prioritize, and plan your migration to quantum-safe encryption with the Quantum Trust Hub add-on module.
PKI+
Provision, govern and scale private trust certificates with a Post Quantum ready cloud based Enterprise PKI-as-a-Service.
- PKI+ User Guide
- PKI+ API Guide
SIGN+
Secure software, firmware, and containers with a comprehensive enterprise code signing solution.
SSH+
Control SSH access and key rotation at scale with an SSH key lifecycle management solution.
KUBE+
Unify DevOps and Security teams by managing certificates with a Kubernetes-native certificate lifecycle management solution.
DDI+
Manage domain registration, renewal, decommissioning, and other security controls with an end-to-end domain lifecycle management solution.
ADC+
Automate and orchestrate application delivery infrastructure at scale with an ADC lifecycle automation platform.
Platform
Manage policy and automation across all of the products and modules in the AVX ONE platform.
AppViewX Setup
Get detailed instructions for setting up AVX ONE in on-premises or SaaS deployments.
Release Artifacts
Review new features, fixes, and security advisories with official AppViewX release documentation.

Troubleshooting

Troubleshooting OCSP Request with OpenSSL

Follow these steps to test the OCSP service via CC URL: http://{CCURL}:{Scep port}/ocsp:

Download the immediate issuer and end certificates from the AppViewX UI with the following names:
- PKIaaS_Actions_Private_CA_SubOrdinate - issuer.crt
- dev22.avx.plus - cert.crt
Configure openSSL in the end device.
Trigger the following OpenSSL command with issuer.crt and cert.crt:
```
openssl ocsp -issuer issuer.crt -cert cert.crt -text -url http://pe-pltf-node66.lab.appviewx.net:30022/ocsp -noverify 
```
If the certificate is revoked, the revoke status will be received in the OCSP response as shown:
Once the CC URL is accessible from OCSP, test the same with CC’s load balancer.