WSC has published!  
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/FLASH10884

_________________________________________________________________
Dave Jousma
Manager Mainframe Engineering, Assistant Vice President
[email protected]
1830 East Paris, Grand Rapids, MIĀ  49546 MD RSCB2H
p 616.653.8429
f 616.653.2717


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of John Eells
Sent: Monday, January 15, 2018 8:59 AM
To: [email protected]
Subject: Please Read: Server Certificates Expiring - Soon!

**CAUTION EXTERNAL EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

Last week, one of the RECEIVE ORDER server certificates expired.  The other IBM 
servers you use for getting products and service, and those for the testcase, 
ecurep, and Blue Diamond servers will also expire over the next several months.

Normally, impending expiration is not be a big deal; IBM just gets new 
certificates ahead of the expiration dates, and you never notice. 
However, as I understand it, DigiCert acquired GeoTrust.  All the IBM server 
certificates in question are GeoTrust certificates.  There is rather more to 
the story, but the net is that IBM will replace all its GeoTrust certificates 
with new ones from DigiCert.  This has already been done for one RECEIVE ORDER 
server, eccgw02.rochester.ibm.com.  The GeoTrust CA certificate will no longer 
work with this server.

To continue to use the servers as the certificates are replaced with new ones 
from DigiCert, you will need to get and install a new DigiCert Global Root CA 
certificate.

If you use the eccgw02.rochester.ibm.com RECEIVE order server, you can buy some 
time by using eccgw01.boulder.ibm.com instead until you get the new CA 
certificate.

Look for a WSC Flash later today (I hope) with more-detailed information and 
instructions.  We will update it as we learn more, but the next deadline is 
some time in April, when we are likely to replace additional server 
certificates.  As I understand it, they must all be done by August.

We believe the required action, to get and install a new DigiCert Global Root 
CA certificate, will not change.  My recommendation is that you start the 
process to do that soon so that you do not lose access to the IBM servers.

--
John Eells
IBM Poughkeepsie
[email protected]

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
[email protected] with the message: INFO IBM-MAIN **CAUTION EXTERNAL 
EMAIL**

**DO NOT open attachments or click on links from unknown senders or unexpected 
emails**

This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to