Symantec Advanced Authentication Critical AFM/Adapter patch (PUSH Notification related) to update Google FCM legacy APIs

Products

• CA Advanced Authentication
• CA Advanced Authentication - Risk Authentication (RiskMinder / RiskFort)
• CA Advanced Authentication - Strong Authentication (AuthMinder / WebFort)

Issue/Introduction

Google has announced that applications using Google Firebase Cloud Messaging (FCM) should migrate from legacy FCM APIs to HTTP v1. Apps using the deprecated FCM legacy APIs for HTTP and XMPP should migrate to the HTTP v1 API at the earliest opportunity.

The deprecated APIs will be removed by 21st of June 2024, and messages (including upstream messages) can no longer be sent with those APIs after June 21, 2024. 

Refer to this link for more information: https://firebase.google.com/docs/cloud-messaging/migrate-v1

How this affects you

Symantec Advanced Authentication uses the legacy Google FCM APIs to deliver push notifications through mobile apps and through its SDK. Since the Google FCM APIs are deprecated, your deployment may be impacted.

This change affects Symantec Advanced Authentication versions 9.1, 9.1.01, 9.1.02, 9.1.03, 9.1.04, and 9.1.5

If you are currently not using PUSH Credentials/Notification and do not plan to use the PUSH feature, then there is no action needed and you do not need to apply this critical AFM/Adapter patch to update Google FCM legacy APIs."

Note: PUSH NOTIFICATION WILL START FAILING COME JUNE 21ST, 2024, IF THE POVIDED REMEDIATING PATCH IS NOT APPLIED.

Environment

Symantec Advanced Authentication versions 9.1, 9.1.01, 9.1.02, 9.1.03, 9.1.04, and 9.1.5

Cause

The deprecated FCM legacy APIs will not be supported starting 21st June 2024

Resolution

The Symantec Advanced Authentication product team has developed a AFM/Adapter patch which replaces the deprecated FCM APIs with the HTTP v1 APIs. The patch can be downloaded from My Download page of the Broadcom Support website at https://support.broadcom.com/. On the My Downloads page, go to the Solutions section and download the Symantec-AdvancedAuth-Adapter-9.1.x-FCM-Patch. Instruction on how to apply is available along with the patch.

Please download and apply the patch mentioned above.

Broadcom Software customers may receive product alerts and advisories by subscribing to Proactive Notifications.

If you have questions, please file a Broadcom Support case to contact Broadcom Support https://support.broadcom.com/.

Additional Information

None.