Important: Symantec will be replacing VIP Services web SSL certificates on January 14, 2020 beginning at 10:00 PM GMT / 2:00 PM PST (see Required upgrade for Symantec VIP Services). To facilitate this change, VIP AD FS integration modules must be upgraded to version 9.9 prior to this date. The updated plugin is now available for download from VIP Manager.
This article contains instructions for upgrading the AD FS plugin module. Please refer to the integration guide for specific requirements.
An error can occur if the old hierarchy is used, causing AD FS authentication failures due to the certificate mismatch.
Important considerations before upgrading:
If your organization cannot immediately install the latest AD FS plug-in, certificate pinning can be temporarily disabled. The following steps are recommended as a temporary workaround only until such time the VIP plugin can be upgraded to version 9.9.
To temporarily disable certificate pinning:
(Please backup the Windows Registry before proceeding: https://support.microsoft.com/en-us/kb/322756)