Applies to:

All version of Venafi

Symptoms:

Workflow does not get honored if the workflow is set to anything below stage 800.

"If application is" is set to anything other than blank or a null value, workflow appears to not be working.

Cause:

This is working by design.  During the renewal of a certificate, certificate manager is not aware of the application associated to it.  Therefore, when a workflow is encountered and an application condition is specified the workflow is skipped.  Once stage 800 is reached the application object becomes known and the workflow application setting is valid.

Below is a document describing the processing stages within Venafi. Application stages start at 800 and go until 1200, while certificate processing starts at 0 and goes to 700. Therefore, if you specify an application on a processing stage below 800, the workflow will be skipped.

Certificate Processing Stages

Resolution:

If a workflow is desired before stage 800, it is suggested to create a separate policy container and then create a workflow that does not have an application condition. This will ensure that the workflow will be applied.