Action Required for Customers Using the Symantec VIP Login IdP SAML Certificate – Certificate Renewal

Products

• VIP Service

Issue/Introduction

If you have configured Symantec VIP as your Identity Provider (IdP) for either VIP Login or VIP Enterprise Gateway, then the communications between your SAML client and VIP are secured by a SAML certificate provided by Symantec VIP. On March 24, Symantec is renewing this SAML certificate.

Symantec will use the same CSR to renew this certificate, so your existing certificate will continue to work beyond this date. However, Symantec recommends that you replace the existing SAML certificate and XML metadata file used by your SAML client with the renewed certificate and XML metadata file provided by Symantec. 

Resolution

To download the new VIP IdP SAML certificate and XML metadata file:

1. Log in to VIP Manager:
   
   
   
2. Click Policies:
   
   
   
3. Click the VIP Login tab:
   
   
   
4. Download the appropriate certificate and XML metadata file:
   
   •  If you have configured VIP to authenticate only the second factor, click Metadata XML next to VIP Login IdP (Second Factor Only), and then click Certificate next to VIP Login IdP (Second Factor Only).
   
      The XML metadata file and certificate will download in your browser.
   
   • If you have configured VIP to authenticate only the first and second factor, click Metadata XML next to VIP Login IdP (First and Second Factor).and then click Certificate next to VIP Login IdP (First and Second Factor).
   
     The XML metadata file and certificate will download in your browser.
   
   

Refer to the instructions provided with your SAML client for procedures on installing the new VIP IdP SAML certificate and XML metadata file.