{"id":70211,"date":"2015-12-01T18:56:25","date_gmt":"2015-12-01T18:56:25","guid":{"rendered":"http:\/\/www.esri.com\/arcgis-blog\/products\/product\/uncategorized\/encryption-certificate-updates-coming\/"},"modified":"2022-02-16T11:28:24","modified_gmt":"2022-02-16T19:28:24","slug":"encryption-certificate-updates-coming","status":"publish","type":"blog","link":"https:\/\/www.esri.com\/arcgis-blog\/products\/trust-arcgis\/administration\/encryption-certificate-updates-coming","title":{"rendered":"Encryption Certificate Updates Coming"},"author":3911,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"_searchwp_excluded":""},"categories":[37501],"tags":[24081,24071],"industry":[],"product":[763582],"class_list":["post-70211","blog","type-blog","status-publish","format-standard","hentry","category-administration","tag-ssamymlgp","tag-security","product-trust-arcgis"],"acf":{"short_description":"We are happy to announce that our update of ArcGIS Online transport encryption certificates to a stronger hashing algorithm will be compl...","flexible_content":[{"acf_fc_layout":"content","content":"

We are happy to announce that our update of ArcGIS Online transport encryption certificates to a stronger hashing algorithm will be complete December 2nd<\/sup>, 2015.\u00a0 Specifically, we are transitioning from SHA-1 to SHA-256 certificates (also referred to as SHA-2).<\/p>\n

Why<\/strong>?
\nThe update of certificates is not just a change for Esri\u2019s web services, but is a change occurring across all Internet services over the next year or so \u2013 Microsoft, Google, Mozilla, and Apple have documented their SHA-1 deprecation plans<\/a> and browsers will soon be warning users about the risks of continuing to utilize SHA-1.\u00a0 Developers utilizing iOS9 now are already starting to see warnings<\/a> about SHA-1 certificates.\u00a0 By Esri completing an update of our certificates, security is improved and customers will not run into these warnings.<\/p>\n

Compatibility<\/strong>?
\nAll modern-day browsers support SHA-2, but some older systems\/browsers do not support SHA-2 \u00a0certificates.\u00a0 For example, ArcPad users utilizing Windows Mobile 6.5 or earlier could run into issues connecting to secured ArcGIS Online after the upgrade to SHA-2 certificates.\u00a0 We strongly recommend transitioning to a mobile version\/solution that is fully supported by the vendor to ensure the most robust security for your connectivity.\u00a0 ArcPad 10.2.3 and later have been updated\u00a0<\/a>to ease the urgency of transitioning to a current platform.<\/p>\n

What about root certificates?
\n<\/strong>There are plenty of certificate permutations to leave you potentially scratching your head as some of our content device network (CDN) providers will be keeping their root certificates SHA-1. \u00a0The good news is that utilizing SHA-1 root certificates presents no more risk than utilizing SHA-2 root certificates and should not be flagged as a risk by various browsers.\u00a0 The reason for this is because unlike other certificates, the trust of the roots is not determined by validating the signature.<\/p>\n

– The Security Standards & Architecture Team<\/em><\/p>\n

 <\/p>\n

Additional Resources<\/strong><\/p>\n