Critical Reminder: WSS Root CA Replacement

Monday, 6 September — 23 hours and 59 minutes
Complete
Complete

The scheduled maintenance has been completed.

Underway

Scheduled maintenance is currently in progress. We will provide updates as necessary.

Scheduled

ACTION REQUIRED

As previously announced, SSL intercept certificates in the WSS infrastructure will expire on September 5, 2021. It is critical that you schedule the work to distribute the new certificate to your client population to avoid service disruption.

Impact Clients that are not updated on time will experience certificate validation errors which will disrupt access to TLS/SSL encrypted content. Clients can include any device that forwards traffic to WSS.

Required Action Installing WSS Agent v7.1.1 or newer automatically installs the new certificate. Alternatively, the replacement certificate is available for download on the WSS portal and can be distributed using your existing certificate management tools. Both old and new certificates may coexist indefinitely. However, per certificate management best practices, we strongly recommend removing the expired certificate as soon as it is replaced with the new certificate.

For complete details, please visit this updated knowledge article: https://knowledge.broadcom.com/external/article?articleId=200314

Began at:

Affected components
  • Cloud Secure Web Gateway
    • Point of Presence (POP) - Americas
      • Buenos Aires, Argentina (GARBA)
      • Columbia, South Carolina (GUSCO)
      • Des Moines, Iowa (GUSDM)
      • Las Vegas, Nevada (GUSLV)
      • Los Angeles, California (GUSLA)
      • Mexico City, Mexico (GMXMC)
      • Montreal, Canada (GCAMO)
      • Portland, Oregon (GUSPO)
      • Sao Paulo, Brazil (GBRSP)
      • Washington, DC (GUSAS)
    • Point of Presence (POP) - APAC
      • Auckland, New Zealand (GNZAU)
      • Hong Kong (GCNHK)
      • Jakarta, Indonesia (GIDJK)
      • Mumbai, India (GINMU)
      • Osaka, Japan (GJPOS)
      • Seoul, South Korea (GKRSE)
      • Singapore (GSGRS)
      • Sydney, Australia (GAUSY)
      • Taipei, Taiwan (GTWTA)
      • Tokyo, Japan (GJPTK)
    • Point of Presence (POP) - Europe And The Middle East
      • Abu Dhabi, UAE (GAEAD)
      • Amsterdam, the Netherlands (GNLAM)
      • Brussels, Belgium (GBEBR)
      • Bucharest, Romania (GROBU)
      • Copenhagen, Denmark (GDKCP)
      • Dubai, UAE (GAEDX)
      • Dublin, Ireland (GIEDU)
      • Frankfurt, Germany (GDEFR)
      • Helsinki, Finland (GFIHE)
      • London, England (GGBLO)
      • Madrid, Spain (GESTO) ( Previously Madrid, Spain (GESMA))
      • Milan, Italy (GITMI)
      • Oslo, Norway (GNOOS)
      • Paris, France (GFRPA) / Paris, France (GFRVE)
      • Stockholm, Sweden (GSESK)
      • Zurich, Switzerland (GCHZU)
    • Point of Presence (POP) - Africa
      • Johannesburg, South Africa GZASO (Previously Johannesburg GZAJB)