Audit Logging: Indicate / Tag Audit Event when Private Key disclosure occurs

Community Feature Requests
1

Hey team,

We’re noticing in the Audit Logs that the Audit Event for “Export Certificate” with and without a private key shows no differences in the audit logs. Can we maybe have a separate audit event to notify when private key material is disclosed?

Thanks in advance.

1 Like
Gating Automated Private Key Disclosure
2

Hey Sinnwise, thanks for flagging this!

Exports that include the private key are logged separately as “Get certificate bundle” or “Export certificate as PKCS#12”. The catch is that the export window loads the key as soon as it opens, so the bundle entry can show up even when the key wasn’t used. This is why both cases look the same.

I’ve passed this along to the team and will keep you posted!

Thanks!

Jake