Cloud SSL Certificate Updates

Maintenance window: June 18, 2023 00:01 to 04:00 UTC

Impacted Cloud services:

Cloud SSL certificates will be updated for the following services
- App services (*.hclvoltmx.net)
- Dedicatated Identity services (*.auth.hclvoltmx.net)
⚠️ If your application uses public key pinning application updates should be made but are not necessary at this time. Customers that are using public key pinning should include the additional certificate pins in the JSON below.
⚠️ For customers using full SSL certificate pinning, please open a support ticket requesting a copy of the updated HCL certificates.
⚠️ If you are using full SSL certificate pinning, your applications must be published before the this HCL SSL certificate update on the cloud servers or the applications may no longer be able to connect to HCL servers.
If necessary, you can submit your applications for expedited approval (e.g., Apple has an expedited approval process for critical bugs, or in this case, pinned certificates).

Impact Level : high

Customer applications that have pinned the full SSL certificate must be updated as described above prior to this maintenance window. Customer applications that have not pinned SSL certificates will not be affected and will experience no service disruptions during this maintenance window.

Customers using public key pinning should include the updates to the pins listed below in the next publish of your mobile applications to the relevant app store. This set of pins also include the pins for additional backup SSL keys. HCL will be rotating certificates again later this year.

When mobile applications add the additional security of pinning a certificate for VoltMX servers, the application is built with information that allows it to use only locked down certificates. Verification of the SSL certificate, in combination with building the mobile application in protected mode, provides the best security for your mobile application.

The json below contains the necessary pins for Public Key Pinning of the HCL VoltMX Cloud production SSL certificates.

{
    "*.hclvoltmx.net"          : [
        "yjg/9eaEB+Lh68+DeUvX0cOb/+OMDqs3d15snWwRzYs=",
        "nV05xy/8ejyoGXvFV/tL+8JavIZ6O7rfU5Z/3RO2N4s=",
        "RVIUssObuqwIn/jA6zSNWqdU++8wxHfpm2uJrIJWrOM=",
        "q/xZuNZkwiNZ72g+gp7WuEvWMed1T0qTUcr47YpoMWM=",
        "NKvrJodATL1podc1DZ0Drd9lzf7SWEmK8oPL7l2g76g="
    ],
    "*.auth.hclvoltmx.net"     : [
        "CAMXj/DsquaCqbXLe7vpoH18P5ThihnLTVi0wJAr7FE=",
        "yjg/9eaEB+Lh68+DeUvX0cOb/+OMDqs3d15snWwRzYs=",
        "nV05xy/8ejyoGXvFV/tL+8JavIZ6O7rfU5Z/3RO2N4s=",
        "RVIUssObuqwIn/jA6zSNWqdU++8wxHfpm2uJrIJWrOM=",
        "q/xZuNZkwiNZ72g+gp7WuEvWMed1T0qTUcr47YpoMWM=",
        "NKvrJodATL1podc1DZ0Drd9lzf7SWEmK8oPL7l2g76g="
    ],
    "*.messaging.hclvoltmx.net": [
        "RD7OME7ESYWLNadwtTvCqO+DruprSlRPgi0nmrsXPjI=",
        "yjg/9eaEB+Lh68+DeUvX0cOb/+OMDqs3d15snWwRzYs=",
        "nV05xy/8ejyoGXvFV/tL+8JavIZ6O7rfU5Z/3RO2N4s=",
        "RVIUssObuqwIn/jA6zSNWqdU++8wxHfpm2uJrIJWrOM=",
        "q/xZuNZkwiNZ72g+gp7WuEvWMed1T0qTUcr47YpoMWM=",
        "NKvrJodATL1podc1DZ0Drd9lzf7SWEmK8oPL7l2g76g="
    ],
    "Amazon"           : "JSMzqOOrtyOT1kmau6zKhgT676hGgczD5VMdRMyJZFA=",
    "Amazon Root CA 1" : "++MBgDH5WGvL9Bcn5Be30cRcL0f5O+NyoXuWtQdX1aI=",
    "Go Daddy Secure Certificate Authority - G2": "8Rw90Ej3Ttt8RRkrg+WYDS9n7IS03bk5bjP/UXPtaY8=",
    "Go Daddy Root Certificate Authority - G2"  : "Ko8tivDrEjiY90yGasP6ZpBU4jwXvHqVvQI0GS3GNdA=",
    "Starfield Services Root Certificate Authority - G2" : "KwccWaCgrnaw6tsrrSO61FgLacNgG2MMLq8GE6+oP5I="
}

References

No downtime is expected for the impacted Cloud services while this maintenance is being performed. The scheduled maintenance is designed to mitigate disruptions to service availability and performance for the impacted Cloud services. However, it is possible for the impacted Cloud services to be unavailable and/or performance degraded for a short period of time during the maintenance window. Note that no changes are being applied for other Cloud services outside of the list of impacted services above and no service availability or performance disruption is expected for other Cloud services.