ArcGIS Blog

Administration

ArcGIS Trust Center

Encryption Certificate Updates Coming

By Michael Young

We are happy to announce that our update of ArcGIS Online transport encryption certificates to a stronger hashing algorithm will be complete December 2nd, 2015.  Specifically, we are transitioning from SHA-1 to SHA-256 certificates (also referred to as SHA-2).

Why?
The update of certificates is not just a change for Esri’s web services, but is a change occurring across all Internet services over the next year or so – Microsoft, Google, Mozilla, and Apple have documented their SHA-1 deprecation plans and browsers will soon be warning users about the risks of continuing to utilize SHA-1.  Developers utilizing iOS9 now are already starting to see warnings about SHA-1 certificates.  By Esri completing an update of our certificates, security is improved and customers will not run into these warnings.

Compatibility?
All modern-day browsers support SHA-2, but some older systems/browsers do not support SHA-2  certificates.  For example, ArcPad users utilizing Windows Mobile 6.5 or earlier could run into issues connecting to secured ArcGIS Online after the upgrade to SHA-2 certificates.  We strongly recommend transitioning to a mobile version/solution that is fully supported by the vendor to ensure the most robust security for your connectivity.  ArcPad 10.2.3 and later have been updated to ease the urgency of transitioning to a current platform.

What about root certificates?
There are plenty of certificate permutations to leave you potentially scratching your head as some of our content device network (CDN) providers will be keeping their root certificates SHA-1.  The good news is that utilizing SHA-1 root certificates presents no more risk than utilizing SHA-2 root certificates and should not be flagged as a risk by various browsers.  The reason for this is because unlike other certificates, the trust of the roots is not determined by validating the signature.

The Security Standards & Architecture Team

 

Additional Resources

Share this article

Subscribe
Notify of
0 Comments
Oldest
Newest
Inline Feedbacks
View all comments
Ana de Barros(@anadebarros)
May 28, 2024 12:56 pm

I would love to have a tutorial for beginners on this topic! Also, where can we get the imagery?

zar arokh(@zar-arokh98)
June 29, 2024 1:24 am

Hello, I would like to know if these images require orthorectification. If they do, could you please assist me in finding a method to accomplish it? I have tried searching on platforms like YouTube, but I couldn’t find a suitable solution.