ABRCA Root CA Certificate Update required
18229
07 June 2021
07 June 2021
Network Security Group Customer Communications
SUBJECT: IMPORTANT - Your ABRCA Root Certificate – Action Required – 3rd Reminder and Updated Information
Valued Customer,
This letter is your third reminder that the root certificate for one or more of your Symantec products will be expiring (attached is the original email dated February 18, 2021). Below you will find instructions as to how to update each affected product’s certificate. You are advised to take action as soon as possible to avoid any system failures when the certificate(s) expire.
Products Impacted by this Change:
The table below indicates the Symantec products impacted by this root expiration. It also provides actions you need to take and includes links to Knowledge Base {KB} articles that offer detailed instructions. Upgrade completion dates are indicated as well. Please note that you must adhere to these certificate upgrade dates to avoid possible system failures. Depending on the type of appliance you have in your environment, the expiration date is either November 15 or December 18, 2021. Failure to take action by validating the automatic update is working, taking the specified manual steps, or upgrading to the appropriate software version by the specified date may result in a system outage. These dates cannot be extended.
It is strongly recommended that you complete the actions below by August 31, 2021.
Please refer to the chart below. If the product has an automatic update capability, you should confirm that the update applied successfully as per the KB article instructions. If the automatic update does not take place because of a firewall or other connectivity issues, then a manual step is provided for most products.
Software upgrades labeled "Upgrade Required" means that the product must be upgraded to the new software version before the root certificate expires.
Additional testing has revealed a scenario where manually updating the appliance certificate and trust package is not sufficient for some products. These products now also require an additional software upgrade to properly validate the certificate during subscription downloads.
Note that some products listed as "Upgrade Required" require a two-step process. The first step is to upgrade to the minimum software version, and then a second step requires verifying the appliance certificate update. Please see the revised table below for products requiring a software update and the KB articles which will provide software versions and availability dates and updated installation instructions.
Product |
Recommendation / Action Plan |
Automatic Update Available |
Manual Update Available |
Software Upgrade Recommendation |
Availability |
ProxySG |
ProxySG Appliance Birth Registration Certificate Authority (ABRCA) https://knowledge.broadcom.com/external/article/207152 |
Yes |
Yes |
No upgrade necessary
|
N/A |
Advanced Secure Gateway (ASG) |
ASG Appliance Birth Registration Certificate Authority (ABRCA) Update https://knowledge.broadcom.com/external/article/207153 |
Yes |
Yes |
Upgrade Required
|
April 2021 |
Integrated Secure Gateway (ISG) |
Integrated Secure Gateway Birth Registration Certificate Authority (ABRCA) https://knowledge.broadcom.com/external/article/207145 |
No |
Yes |
Recommended |
May 2021 |
Content Analysis Appliance |
Content Analysis Appliance Birth Registration Certificate Authority (ABRCA) Root Certificate Update |
Yes |
Yes |
Upgrade Required |
April 2021 |
SSL Visibility Appliance |
SSL Visibility Appliance Birth Registration Certificate Authority (ABRCA) https://knowledge.broadcom.com/external/article/207140 |
No |
No |
Upgrade Required |
May 2021 |
Management Center |
Management Center Appliance Birth Registration Certificate Authority (ABRCA) Update https://knowledge.broadcom.com/external/article/207144 |
No |
Yes |
Upgrade Required |
May 2021 |
Reporter |
Reporter Appliance Birth Registration Certificate Authority (ABRCA) Update https://knowledge.broadcom.com/external/article/207141 |
No |
Yes |
Upgrade Required |
April 2021 |
PacketShaper |
PacketShaper Appliance Birth Registration Certificate Authority (ABRCA) Update https://knowledge.broadcom.com/external/article/207670 |
No |
No |
Upgrade Required |
Feb 2021 |
PolicyCenter |
PolicyCenter Appliance Birth Registration Certificate Authority (ABRCA) Update https://knowledge.broadcom.com/external/article/207671 |
No |
No |
Upgrade Required |
Mar 2021 |
DLP Appliance (S500 model and Virtual Appliance) |
DLP Appliance (S500 model and Virtual Appliance) Birth Registration Certificate Authority (ABRCA) Update
|
No |
Yes |
Recommended
|
June 2021 |
Industrial Control System Protection Neural (ICSP Neural) |
A manual and/or patch release will be made available. Check back for the KB article update |
Yes |
Yes |
Upgrade Required |
Targeted for July 2021 |
Please expect to receive monthly email reminders regarding this root certificate expiration and upgrade opportunity. Symantec Systems Engineers and Symantec Partners may also be contacting you directly to assess your update status and explain the importance of completing this task as soon as possible.
If you wish to be removed from future ABRCA communications, please email [email protected] and state ‘remove’ in the subject line.
Thank you for using Symantec products and services.
Sincerely,
The Symantec Network Security Team