ACTION REQUIRED: Upcoming certificate expiry for Data Upload Tool

Duration: 1 minute

The URL certificate expires on 03 Jan 2023. To ensure the continued operation of Arcot’s Data Upload Tool (DUT) the following steps must be completed to trust the new certificate. These steps must be completed by 14 Oct 2022 to ensure service continuity after Arcot installs the renewed certificate at 0500 GMT on 18 Oct 2022 (to complete it before the freeze period). The root and intermediate are retained to minimize the need of any action. To obtain the certificates, follow the link to our knowledge base and download the file listed

Arcot understands that this is short-notice for the change and we apologize for the disruption that expediting this change will cause to your organization. Improving our Certificate Lifecycle Management is a strategic area of focus for Arcot and we are investing heavily to ensure that more advanced notice is provided for future changes.

Implementation Specifics


Arcot offers two options for uploading data; one is a DUT client server application (also referred to as DUCCMD or Data Upload Tool) and the other is DUT Web Services using the SOAP messaging protocol. ** Updated Certificates**

  • Leaf Certificate:
  • Intermediate Certificate: DigiCertEVRSACAG2.crt
  • Root Certificate: DigiCertGlobalRoot_G2.crt

DUT Client server application

If the issuer is using Arcot’s DUT Client server application over SSL, then please complete the following changes on the server which has DUT Client installed. The paths to the certificates mentioned in the following steps assume that the DUT has been installed to the default path defined in the installation instructions. The path of installation is stored against an environment variable named ARCOTHOME. Replace the root certificate in the ssl folder with the new root certificate. By default, the path will be: Windows: %ARCOTHOME%\ssl UNIX: $ARCOTHOME/ssl Open the upload.ini file in a text editor. By default, the path to the upload.ini file is: Windows: %ARCOTHOME%\conf UNIX: $ARCOT_HOME/conf Update the value of serverCACert parameter in upload.ini to the absolute path of the root certificate.

DUT Web Service

Depending on the language (Java, C++) in which your in-house DUT client has been implemented, you may need to import the root and intermediate certificates to the trust store. These can vary between the system level or a custom trust store based upon the implementation.

If you have any questions, kindly create a case through the Broadcom Support Portal ( .

Sincerely, Arcot Support Team

Affected components
  • Arcot
    • Data Exchange
      • DUT Server
      • DUT Web-API