On 1/15/2018 8:58 AM, John Eells wrote:
Last week, one of the RECEIVE ORDER server certificates expired. The
other IBM servers you use for getting products and service, and those
for the testcase, ecurep, and Blue Diamond servers will also expire over
the next several months.
Normally, impending expiration is not be a big deal; IBM just gets new
certificates ahead of the expiration dates, and you never notice.
However, as I understand it, DigiCert acquired GeoTrust. All the IBM
server certificates in question are GeoTrust certificates. There is
rather more to the story, but the net is that IBM will replace all its
GeoTrust certificates with new ones from DigiCert. This has already
been done for one RECEIVE ORDER server, eccgw02.rochester.ibm.com. The
GeoTrust CA certificate will no longer work with this server.
To continue to use the servers as the certificates are replaced with new
ones from DigiCert, you will need to get and install a new DigiCert
Global Root CA certificate.
If you use the eccgw02.rochester.ibm.com RECEIVE order server, you can
buy some time by using eccgw01.boulder.ibm.com instead until you get the
new CA certificate.
Look for a WSC Flash later today (I hope) with more-detailed information
and instructions. We will update it as we learn more, but the next
deadline is some time in April, when we are likely to replace additional
server certificates. As I understand it, they must all be done by August.
We believe the required action, to get and install a new DigiCert Global
Root CA certificate, will not change. My recommendation is that you
start the process to do that soon so that you do not lose access to the
IBM servers.
This should not have been done without prior notice. I wasted many
hours trying to figure out what the error was here. It did not help
that I installed new Java maintenance on 1/9, and then the cert expired
on 1/11, and then the alert was issued today. We deserve better from IBM.
Regards,
Tom Conley
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
