The Appliance Birth Registration Certificate Authority (ABRCA) root CA certificate is the ultimate root of trust for all appliance certificates that Symantec products use. Symantec has created a new ABRCA root CA certificate to replace the one expiring in November 2021. If the ABRCA root CA certificate is not updated on the appliance, some features that use the appliance certificate for authentication will fail.
Warning: To ensure the uninterrupted operation of your SSL Visibility appliances, you must make it a priority to complete the updates by the following dates:
Upgrade to SSL Visibility 4.5.6.1 (to be released later in 2021) by October 31, 2021
Update your license on each appliance by October 31, 2021
The new certificate has an expiration date Dec 31 00:04:16 2037 GMT, and you can update it on the appliance without making any other configuration changes.
To determine the certificate expiration date:
From the PKI menu, open Management Trust.
Select the bluecoat-appliance CA list.
Select the ABRCA_root certificate.
Click on the information icon and confirm the Valid To date.
Note: Ensure that the appliance can access the download.bluecoat.com domain to download the virtual appliance license.
To update the ABRCA root CA certificate on your SSL Visibility appliance, upgrade to version 4.5.6.1 when available (targeted to release April 2021) and then upgrade your license by doing one of the following:
Automatically update the license by enabling the Auto Update License feature:
Navigate to (Platform Management) > License.
On the License Settings panel, click Edit and enable the feature.
Manually update the license:
Download a new copy of the license.
Navigate to (Platform Management) > License.
Click Add.
On the Upload File tab, click Browse to browse to the file location, or on the Paste Text tab, paste the license text.
To validate that your license is up to date, navigate to (Platform Management) > License and ensure the License Status has a Current Status of OK.
If the certificate expires, the following issues will occur:
License verification failures, resulting in traffic interruption
Failures in offloading from SSL Visibility to ProxySG appliances
Failures when installing new licenses and upgrading
Inability to perform heartbeat uploads
Other issues, yet to be identified, might also occur.