Ask Us logo

Quick Links

ipsCA certificates to expire December 30, 2009

SUMMARY: ipsCA certificates to expire December 30, 2009
POSTED ON: 12/16/2009
REPORTER: ITS Help Desk (help@hawaii.edu)
START TIME: Dec 16 10:34 AM
END TIME: Dec 16 10:34 AM
DESCRIPTION: For system administrators using (free) ipsCA SSL certificates for web and other public-facing servers please read on. If you are using SSL certificates from other vendors you may ignore this message.

On December 30, 2009 the root certification authorities (CAs) for your ipsCA certificates will expire and are being replaced. ipsCA explains this at:

http://certs.ipsca.com/Support/hierarchy-ipsca.asp

In addition to updating your server certificates, client software such as browsers will need to be updated to recognize the new CAs. Failure to do so will cause browsers to see a certificate error upon attempting to securely connect to your server. While users may be able to connect by ignoring the error message, it may cause concern for your customers.

Internet Explorer users can update their browsers through Windows Update (November 2009 Root Cert Update). Please note this is not a critical update, so users must explicitly choose to install it.

Firefox currently does not have an update for their browser, however, a request to add the new root CAs is pending as described at:

https://bugzilla.mozilla.org/show_bug.cgi?id=529286

Please note that the ITS Help Desk will be closed from December 24, 2009 through January 3, 2010 and will not be able to assist users in updating their browsers when the certs expire on December 30, 2009. If you are using an ipsCA cert on your server you should advise your users to update their browsers if possible before the winter break begins. You may also wish to advise your users of this situation via a special web page so that they are willing to bypass the error message until the situation is resolved. You can continue to check with ipsCA on the status of browsers other than IE.

To avoid this problem you might also consider replacing your ipsCA certificate with another vendor. The ITS Site License office has a limited number of Thawte certificates available for purchase:

http://www.hawaii.edu/sitelic/thawte/thawte.html

Ordering a new certificate requires submitting new requests to the vendor on the mainland and may take a day to process. The Site License Office will be closed from December 19, 2009 so orders should be submitted as soon as possible to ensure a new cert can be issued before the winter break. Questions regarding purchasing a Thawte certificate should be addressed to the Site License Office at (808) 956-2404 or sladmin@hawaii.edu.

If you have questions or need assistance in updating your ipsCA server or client CAs, contact ipsCA as soon as possible:

http://support.ipsca.com/support

ITS Help Desk
Email: help@hawaii.edu
Phone: (808) 956-8883
Toll Free (neighbor isles): (800) 558-2669