Transaction Logs

The ADSS NPKD Service records every request received and the corresponding response generated. These records are stored in the Transaction Logs, providing a comprehensive audit trail for monitoring, troubleshooting, compliance, and forensic analysis.

To access the NPKD Service Transaction Logs, navigate to the following screen in the ADSS Server console:

The configuration items are as follows:

Items	Description
Clear Search	Clears the currently applied search criteria and displays the complete set of transaction records.
Search	Opens the Advanced Search dialog, allowing transaction records to be filtered using one or more search criteria.
Customize Columns	Opens the Customize Columns dialog, allowing operators to choose which columns are displayed in the transaction log grid.
Navigation Controls	Navigate between pages of transaction records. The number of records displayed per page is configurable through Global Settings.
Export Logs	Exports all transaction log records to a compressed CSV file. The exported file uses the literal `~&~` as the column delimiter and can be opened in Microsoft Excel. For detailed analysis, including archived transactions, import the exported archive back into ADSS using the Import Archived option.
Verify Integrity	Verifies the integrity of transaction log records by validating their cryptographic HMAC values. The verification process detects modified and deleted records and generates a report that can be exported. When saving the verification report, it is recommended to use the .html extension so that it can be viewed in a web browser.
Log ID	Displays the system-generated unique identifier for each transaction log record.
Request Type	Indicates the type of request processed by the NPKD Service. The supported request types are: GetMasterList GetCRLList Refer to the ADSS Developer Guide for detailed information about each request type.
Response Status	Displays the outcome of the transaction. Possible values are Success and Failed.
Request Time	Displays the date and time when the request was received by the NPKD Service.
Response Time	Displays the date and time when the response was returned to the client.
Request/Response	Provides access to the XML request and response associated with the selected transaction.
Client ID	Displays the Client ID of the application that submitted the request. The Client ID must be registered in the Client Manager of the NPKD Service.
TLS Certificate	Displays the TLS client authentication certificate used for the request. This option is available only when TLS client authentication was used.
Error Code	Displays the error associated with a failed transaction. Hover over the View link to display the detailed error message, such as Profile not allowed or Service stopped.

Transaction records can be sorted in ascending or descending order by selecting the appropriate column heading.

Importing Archived

The Import Archived feature enables operators to import previously exported transaction log archives into the ADSS Server for auditing and analysis.

To import archived transaction logs, click the vertical ellipsis (⋮) in the upper-right corner of the Transaction Logs screen and select Import Archived.

The following screen is displayed:

The configuration items are as follows:

Items	Description
Import Archived Transaction File	Allows the operator to browse and upload a compressed transaction log archive (ZIP) from the local file system. Uploaded files are transferred to the ADSS Server before being imported. The maximum supported upload size is 25 MB. For larger files, use the Archived Transaction File Path option.
Archived Transaction File Path	Specifies the path to an archived transaction log stored on the ADSS Server or on a network-accessible location. The server reads the archive directly from the specified location without uploading it, providing better performance for large files. Both local and network paths are supported. Ensure that the complete file name is included in the specified path.

After specifying the required file, click Import to load the archived transaction records into the Transaction Log Viewer.

Searching Transaction Logs

The Advanced Search feature enables operators to quickly locate specific transaction records by applying one or more search criteria.

To open the search dialog, click the Search icon on the Transaction Logs screen.

The following screen is displayed:

Transaction records can be searched using one or more of the following criteria:

Log ID
Certificate Alias
Request Type
Certificate Type
Response Status
Client ID
Request Time From
Request Time To
Response Time From
Response Time To

After entering the required criteria, click Search to display the matching transaction records.

To remove the applied filters and display all available transaction records, click Clear Search.

Customising Displayed Columns

The Customize Columns feature allows operators to control which columns are displayed in the Transaction Logs grid.

To customize the displayed columns, click Customize Columns on the Transaction Logs screen.

The following screen is displayed:

By default, a predefined set of columns appears in the Selected Columns list.

To modify the displayed columns:

Move a column from Selected Columns to Available Columns to hide it.
Move a column from Available Columns to Selected Columns to display it.

After saving the changes, the Transaction Logs grid is refreshed to reflect the updated column configuration.

Verifying Integrity

Each transaction log record stored by the ADSS NPKD Service is protected using a cryptographic Hash-based Message Authentication Code (HMAC). This mechanism detects unauthorized modifications and helps ensure the integrity of transaction records.

To verify the integrity of the transaction logs, click the vertical ellipsis (⋮) in the upper-right corner of the Transaction Logs screen and select Verify Integrity.

The system validates the HMAC associated with each transaction record and generates an integrity verification report.

The report identifies:

Records whose contents have been modified.
Records with missing or invalid HMAC values.
Records that have been deleted from the transaction log database.

The report can be exported to the local file system. For optimal viewing, it is recommended to save the report with the .html extension.

Repairing HMAC Errors

If transaction records contain missing or invalid HMAC values, click Fix HMAC Errors to recalculate the HMAC for the affected records.

Note: The Fix HMAC Errors feature only repairs records with missing or invalid HMAC values. It cannot recover or detect transaction records that have been permanently deleted from the database.

Exporting Transaction Logs

To export transaction logs, click the vertical ellipsis (⋮) in the upper-right corner of the Transaction Logs screen and select Export Logs.

The transaction logs are exported as a compressed CSV archive.

Note: The export operation always includes the complete transaction log database. Any filters or search criteria currently applied in the Transaction Logs screen are not reflected in the exported archive.

Viewing Transaction Details

To view detailed information for a transaction, click the corresponding Log ID.

The following screen is displayed:

This screen provides detailed information about the selected transaction, including the request type, processing status, timestamps, client information, and other transaction metadata.

Viewing Request and Response Messages

To view the request and response associated with a transaction, click the View link in the Request/Response column.

The Request tab displays the XML request submitted to the NPKD Service

Select the Response tab to view the corresponding XML response returned by the NPKD Service.

Operators can export the request and response XML files to a local or network drive by clicking the appropriate Export button.