Knowledge Base

To align with industry and security best practices and as part of DigiCert's continued effort to maintain a world-class PKI platform, PKI Platform 8 will deprecate support for Transport Layer Security (TLS) 1.0 and 1.1 on August 30, 2021.

What do I need to do?

• Plan your upgrade to TLS 1.2 now. Plans should include time to resolve potential problems that might occur during the upgrade.
• Identify systems that might use TLS 1.0 or TLS 1.1. Remember to check web servers like Apache or Microsoft IIS, .NET Framework, server monitoring agents, and other applications.
• Complete the upgrade and testing before August 30, 2021.
• See DigiCert PKI Platform 8: Enable support for the TLS 1.2 protocol.

Browser support

Most browsers support TLS 1.2 and higher, including Mozilla Firefox, Google Chrome, Safari, Internet Explorer 11, and Microsoft Edge.

API integrations

If you have any API Integrations, enable the TLS 1.2 encryption protocols in those integrations, such as desktop clients and Delegated Authentication Single-Sign-On (SSO).

Helpful resources

With so many different types of systems that rely on TLS, we can't cover all available upgrade paths, but here are a few resources that may help:

• How to enable TLS 1.1 and 1.2 with OpenSSL and Apache
• Update to enable TLS 1.1 and TLS 1.2 as default secure protocols in WinHTTP in Windows (Windows Server 2012, Windows 7 Service Pack 1 (SP1), and Windows Server 2008 R2 SP1)
• To disable support for TLS 1.0 and TLS 1.1 in Windows Server 2019 IIS: Configuring secure cipher suites in Windows Server 2019 IIS.

If you have questions or concerns about making the transition to TLS 1.2 in time, contact your account manager or support team. We're here to help you.