Required DigiCert G2 Root CA Migration for VIP Enterprise Gateway 9.10.x and older.

Products

• VIP Service

Issue/Introduction

In the fall of 2024, Symantec VIP (Broadcom) will issue new SSL certificates for VIP endpoints from the DigiCert Global Root G2 CA. VIP Enterprise Gateway version 9.10.x and older are affected by this change - action is required to avoid a service disruption.

(click here for details about the certificate changes) 

Resolution

When will the change happen? 

The exact data will be posted on this page when it is announced. 

What action is required before the change?

VIP Enterprise Gateway Version:	Required Action:
9.11 or later	No action is required. Includes the new G2 root CA chain.
9.10.x	Run the G2 Import Tool (see below) to load the new G2 CA into the VIP Enterprise Gateway root store.
9.9.x	Run the G2 Import Tool (see below) to load the new G2 CA into the VIP Enterprise Gateway root store.
9.8.x and older	Upgrade to version 9.11. Or, upgrade to 9.9.x/9.10.x, then run the G2 Import Tool post-upgrade). Click here for the VIP Enterprise Gateway installation and upgrade guides. Note: The G2 Import is applicable to EG 9.9.x and 9.10.x only and cannot be run on older versions.

 

VIP Enterprise Gateway G2 Import Tool Instructions:

• Download and unzip the attached VIP_EG_G2Support.zip to a temp location.
• Open an administrator command prompt/shell and navigate to the extracted location of the VIP_EG_G2Support.zip.
• Windows:
  • Type Set VRSN_MAUTH_HOME=<VIP_EG_Install_ Directory> and press enter
  • Type g2support.bat and press enter 
• Linux:
  • Type export VRSN_MAUTH_HOME=<VIP_EG_Install_ Directory> and press enter
  • Type g2support.sh and press enter