Replace Affected InCommon Certificate Authorities
This message is intended for U-M IT staff who are responsible for managing certificates for university websites or systems.
Summary
This is a follow up to IA Alert: Root Certificate Authorities Distrusted regarding an industry-wide certificate authority issue that may affect access to some University of Michigan websites and services. Affected root certificates need to be replaced by October 27, preferably as soon as possible, in order to avoid disruption.
Problem
Recent changes to certificate trust stores have caused certain ECC certificates issued through InCommon/CERTInext to become untrusted. As additional browsers, operating systems, and applications adopt these changes, affected websites and services may become inaccessible.
Action Items
- If you manage websites or services using ECC certificates issued through InCommon/CERTInext, you should replace the affected certificates by October 27, 2026, to help prevent potential service disruptions. Use the instructions on the ITS Service Status page to do so.
- For additional information, updates and guidance, visit theITS Service Status page. More steps may be needed in the future, depending on the evolving situation.
Information for Users
Some university websites and applications may become unavailable to visitors.
Questions, Concerns, Reports
If you have questions or need assistance, send a request to [email protected].