True SSO - Causing Internal CA Certificate Database Growth

[John Twilley]

We noticed that the True SSO certs used via Workspace One Access is causing massive Database bloat on our Internal CA servers.  The DB grew to 15 GB per server, 80% of it from expired True SSO certs.  We manually purged 80,000 True SSO certs from January to July.

Is this normal?   My CA Admin is obviously not thrilled, as he now has to take the Server offline and clean/shrink the database monthly, where it was never an issue before True SSO was implemented.

"CertUtil -deleterow 8/9/2024 Cert"   --> cleaned up 20,000 certs in a 3 day period.  That's alot of certs.    We have 12,000 Physicians logging in, sometimes multiple times per day in case you were wondering about the load.

[Daniel Keer]

Is the CA configured to use non persistent certs for TrueSSO?

https://kb.omnissa.com/s/article/2149312