2020年11月11日起,GlobalSign将为PersonalSign证书使用新签发的ICA。在CA行业收到警告后,CA证书中包含特定扩展名(OCSP签名扩展密钥用法)在某些情况下会产生意外的合规性和安全性影响,因此我们正在更改。
当前的PersonalSign证书颁发CA“ GlobalSign PersonalSign 1 CA-SHA256-G3和GlobalSign PersonalSign 2 CA-SHA256-G3”受此问题影响。请注意,未发生任何关键事件或安全事故,仅在纠正合规性问题并解决任何潜在的未实现的安全风险的情况下执行更改。
根据CA / B论坛基准要求和GlobalSign CPS,将作为补救计划的一部分,迁移到新的PersonalSign ICA。如果您当前拥有上面列出的PersonalSign CA颁发的任何PersonalSign证书,请放心,您的证书暂时仍然有效,并且任何撤销行为将及时与所有受影响的客户共享,其中包括有关如何避免证书中断和保证业务连续性的替换指南。
注意:受影响的ICA将于2021年2月24日18:00 (北京时间)。
影响与建议:(对客户的影响-基于证书的客户端身份验证用例)
计划于2020年11月11日对ICA进行的更改,仅影响在服务器上手动安装当前PersonSign ICA并仅依赖该ICA验证客户端证书的客户。
如果将GlobalSign PersonalSign证书用于Web服务器上的客户端身份验证,则需要安装新的中间证书(ICA)并配置访问权限以接受新的中间证书。
如需要,您可以打开链接找到新的中间证书的副本:https : //support.globalsign.com/ca-certificates/intermediate-certificates/personalsign-intermediate-certificates
对于所有其他客户,新颁发(或重新颁发)的PersonalSign证书订单将不会受到影响,因为新的ICA将在安装证书后自动安装在您的浏览器中。
对于FDA用户,请注意,GlobalSign已经通知了FDA电子提交网关(ESG),并向他们提供了新的可信CA层次结构。
注意:
1、关于FDA ESG帐户中更新公钥(续签和重新发行)的分步说明。如果您重新发行或续签客户端数字证书,可参考:《GlobalSign FDA ESG 更新公钥(续签和重新发行)》。
2、关于个人证书在Outlook2013使用方法,具体的操作步骤可参考:《GlobalSign 证书安装 outlook 邮箱教程》。
最新评论
Hey! I could have sworn I've been to this blog before but after checking through some of the post I realized it's new to me. Anyways, I'm definitely delighted I found it and I'll be book-marking and checking back often!
Heya i am for the primary time here. I came across this board and I to find It really helpful & it helped me out much. I'm hoping to give something back and help others like you helped me.
Pretty element of content. I simply stumbled upon your website and in accession capital to claim that I acquire in fact enjoyed account your weblog posts. Any way I’ll be subscribing for your augment and even I success you access persistently rapidly.
Would love to perpetually get updated outstanding weblog! .
Some really nice stuff on this internet site, I like it.
Can I simply say what a reduction to find somebody who actually knows what theyre talking about on the internet. You positively know find out how to carry an issue to mild and make it important. Extra individuals have to read this and understand this facet of the story. I cant believe youre not more fashionable because you positively have the gift.
I like this post, enjoyed this one appreciate it for posting.
Definitely, what a splendid blog and enlightening posts, I surely will bookmark your site.Best Regards!