ACTION REQUIRED: Upcoming certificate expiry for two-way TLS for secure5ssl.arcot.com

Tuesday, 23 April 5 minutes
Complete
Complete

The maintenance is now complete. Thanks for your patience.

Underway

The scheduled maintenance is now underway. We'll keep you updated on our progress.

Scheduled

The secure5ssl.arcot.com URL certificate expires on 07 May 2024. To ensure the continued operation of secure API connection using two-way TLS certificate the following steps must be completed to trust the new certificate. These steps must be completed by 22 Apr 2024 to ensure service continuity after Arcot installs the renewed certificate at 0500 GMT on 23 Apr 2024. The root and intermediate remain unchanged and only a new leaf certificate has been issued. If you already have the root and/or intermediate trusted then there is no action required.

To obtain the certificates, follow the link to our knowledge base https://knowledge.broadcom.com/external/article?articleId=250093 and download the file listed secure5ssl_arcot_com_681547590.zip.

Once downloaded , please review the zip file containing the new certificate chain. The root and intermediate (extracted from leaf) of the certificate chain remain unchanged and only a new leaf certificate has been issued. If you already have the root and/or intermediate or this certificate is not being used there is no action required.

Arcot’s recommendation is to trust the Root and Intermediate certificates. If you are required to also trust the Leaf certificate, please ensure that all three certificates are loaded into your Trust Store. To avoid impact to service, the existing certificates must not be removed until they have expired.

As an acknowledgement, please inform Broadcom CSM/PM or raise a support case that:

  1. You have received the renewed certificates properly (as sometimes they are corrupted)
  2. The action required at your end with an ETA so we can line up downstream plans accordingly

Once you have installed the new certificates, Arcot can verify connectivity before switching production traffic to use the new certificates. Arcot will also monitor the transactions post switching of the production traffic and notify if required.

If you have any questions, kindly create a case through the Broadcom Support Portal (https://support.broadcom.com/) .

Sincerely, Arcot Support Team

Began at:

Affected components
  • Arcot
    • Arcot for Issuers (AfI)
      • Secure5