ACTION REQUIRED: Upcoming certificate expiry for Data Upload Tool secure4.arcot.com

The maintenance is now complete. Thanks for your patience.

The secure4.arcot.com URL certificate expires on 03 Jan 2023. To ensure the continued operation of Arcot’s Data Upload Tool (DUT) the following steps must be completed to trust the new certificate. These steps must be completed by 14 Oct 2022 to ensure service continuity after Arcot installs the renewed certificate at 0500 GMT on 18 Oct 2022 (to complete it before the freeze period). The root and intermediate are retained to minimize the need of any action. To obtain the certificates, follow the link to our knowledge base https://knowledge.broadcom.com/external/article?articleId=249939 and download the file listed 1663113246461__secure4_arcot_com_257976633.zip.

Arcot understands that this is short-notice for the change and we apologize for the disruption that expediting this change will cause to your organization. Improving our Certificate Lifecycle Management is a strategic area of focus for Arcot and we are investing heavily to ensure that more advanced notice is provided for future changes.

Implementation Specifics

Introduction

Arcot offers two options for uploading data; one is a DUT client server application (also referred to as DUCCMD or Data Upload Tool) and the other is DUT Web Services using the SOAP messaging protocol. ** Updated Certificates**

• Leaf Certificate: secure4.arcot.com.crt
• Intermediate Certificate: DigiCert_EV_RSA_CA_G2.crt
• Root Certificate: DigiCert_Global_Root_G2.crt

DUT Client server application

If the issuer is using Arcot’s DUT Client server application over SSL, then please complete the following changes on the server which has DUT Client installed. The paths to the certificates mentioned in the following steps assume that the DUT has been installed to the default path defined in the installation instructions. The path of installation is stored against an environment variable named ARCOT_HOME. Replace the root certificate in the ssl folder with the new root certificate. By default, the path will be: Windows: %ARCOT_HOME%\ssl UNIX: $ARCOT_HOME/ssl Open the upload.ini file in a text editor. By default, the path to the upload.ini file is: Windows: %ARCOT_HOME%\conf UNIX: $ARCOT_HOME/conf Update the value of serverCACert parameter in upload.ini to the absolute path of the root certificate.

DUT Web Service

Depending on the language (Java, C++) in which your in-house DUT client has been implemented, you may need to import the root and intermediate certificates to the trust store. These can vary between the system level or a custom trust store based upon the implementation.

If you have any questions, kindly create a case through the Broadcom Support Portal (https://support.broadcom.com/) .

Sincerely, Arcot Support Team