IMMEDIATE ACTION REQUIRED: SecureAuth G3 Intermediate Certificate Expiration
SecureAuth’s Intermediate Certificate Authorities—SecureAuth G3 Intermediate Certificate Authority 1A, 2A, 3A, 4A, 1B, 2B, 3B, and 4B—will begin expiring on May 16, 2025. Consequently, appliance and user certificates issued by these authorities will also expire.
To avoid service disruptions, all appliances, devices, workstations, and any systems relying on this certificate infrastructure must be updated before the expiration date.
This update is critical for:
SAML and OIDC integrations: If your SAML/OIDC applications use the SecureAuth Appliance Certificate as the signing certificate.
VPNs, MDMs, or Client-Side SSL integrations: If you are using SecureAuth Certificate-Based Authentication (x509).
Need to know
To ensure uninterrupted service, SecureAuth IdP (SA IdP) appliances must run the SecureAuth Appliance Certificate Renewal Utility (ACRU) to renew the Appliance Certificate and install the latest intermediates: SecureAuth Intermediate Certificates X1, X2, Sigma1, and Sigma2.
For those using SecureAuth Certificate Services with VPNs, MDMs, or Client-Side SSL integrations, the latest intermediate certificates must be uploaded to VPN devices, MDM devices, user workstations, and mobile devices before running the ACRU tool.
If your SAML/OIDC applications are currently using the expiring SecureAuth IdP Appliance Certificate as the signing certificate, update them to use the renewed certificate.
Failure to complete these steps by May 16, 2025, will result in:
Disruption of any certificate-based authentication.
Potential disruption of SAML/OIDC applications using the SA IdP Appliance Certificate as the signing certificate.
For instructions on downloading and installing the SecureAuth Appliance Certificate Renewal Utility (ACRU), see SecureAuth IdP Appliance Certificate Renewal Utility (ACRU).
If you need assistance or have any questions, open a support ticket at https://support.secureauth.com.