Our SSL vendors, GeoTrust are in the midst of a transition from 1024-bit roots to new, more secure 2048-bit roots.
As a result of this upgrade, there are some changes to how SSL certificates are purchased through TPP, specifically relating to the ordering and installation.
Please note: Currently installed SSL certificates are not affected by the changes. However, new certificates along with renewals of existing certificates will required 2048-bit Certificate Signing Requests (CSRs) in the future, depending on the specific certificate brand and type.
The new 2048-bit root updates will go live on the following date:
- GeoTrust – July 22, 2010
TPP Internet will begin requiring 2048-bit CSRs at the same time as the root updates occur. You may already submit 2048-bit CSRs for all products. In fact, Extended Validation (EV) certificates already required 2048-bit CSRs. If you submit an SSL order with a 1024-bit CSR after the root updates take place on the date listed above, the order will fail.
Installation Changes Required
Additionally, the SSL certificate installation process will change for all GeoTrust certificates (excluding True BusinessID with EV) issued after the go live date listed above. Users will be required to install an intermediate Certification Authority Certificate in line with industry best practices. The excluded products listed already require the installation of this intermediate certificate.
More Information
For the latest information about the 2048-bit root changes, you may wish to view the Support Advisories issued by each brand:
If you have any further questions, please don’t hesitate to contact TPP Support at techsupport@tppinternet.com.au
The TPP Team
