--------------------------------------------------------------------------------------------------------------- EGI BROADCAST TOOL : https://operations-portal.egi.eu/broadcast/send --------------------------------------------------------------------------------------------------------------- Publication from : Maarten Litmaath <Maarten.Litmaath(a)cern.ch> ---------------------------------------------------------------------------------------------------------------- Dear colleagues, last week, many of us learned of a severe issue affecting any GEANT TCS certificate requests, for hosts and users, including renewals. Service interruption is highly likely starting at the beginning of January 2025, which may last for a while (how long we cannot yet predict). The duration and extent of the interruption, as well as any secondary impacts, cannot yet be fully estimated since it depends on several factors not detailed in this message. For users, the ACTIONABLE RECOMMENDATION at this moment is: * Start planning the renewal of -- AND RENEW over the next few weeks, and BEFORE the New Year's break! -- any user certificates signed by one of the GEANT TCS CAs. * Renew your personal certificates via the /clientgeant endpoint: https://cert-manager.com/customer/__NREN_NAME__/idp/clientgeant Meanwhile, take good note of any communications sent by your national or regional NREN - bearing in mind their communications may end up in a different department or shared service center of your institution. ====================================================================== To check if a certificate is affected: openssl x509 -noout -issuer -in $CERTIFICATE | grep GEANT where $CERTIFICATE can be $HOME/.globus/usercert.pem for example. ====================================================================== More news will be provided hopefully soon. ---------------------------------------------------------------------------------------------------------------- link to this broadcast : https://operations-portal.egi.eu/broadcast/archive/3068 ----------------------------------------------------------------------------------------------------------------