Knowledge Base

Description

DigiCert PKI Platform 8 Registration Authority (RA) and administrator certificates will be issued from DigiCert CA certificates starting with the June 2022 release. RA and administrator certificates issued from Symantec CA certificates before this release will remain valid until expiration, but all new certificates will be issued from DigiCert CA certificates starting from the June release of PKI Platform 8. 

Existing administrator and RA certificates are not affected by this change.  For certificates issued after the June release:

• DigiCert CA certificates must be added to trusted certificate stores on devices where new RA certificates are installed.
• For administrator certificate installations, DigiCert PKI Client automatically provisions the CA certificate hierarchy to trusted certificate stores. No further action is required.

RA certificate CA changes apply to the following DigiCert PKI applications:

• All PKI-WS Operations (applications that make requests to PKI Platform 8 SOAP web services hosted at https://pki-ws.symauth.com)
• DigiCert PKI Enterprise Gateway (server application that facilitates communication between Active Directory and DigiCert PKI web services)
  • DigiCert Local Key Management Service (LKMS)
• DigiCert Autoenrollment Server (server application for certificate deployment using Microsoft Autoenrollment)
• DigiCert SCEP Proxy Server (proxy servers for certificate deployments using SCEP enrolment method)
• DigiCert Intune Import Tool for S/MIME (used for the import of S/MIME certificates to a customer Intune tenant)
• RA certificate for authentication to batch async API (requests related to PKI Platform 8 Manufacturing accounts—see the Resources page in your PKI Manager account for more information)

Administrator certificate CA changes apply to browsers used to access PKI Manager on: 

https://pki-manager.symauth.com

If you have concerns or further questions about these changes, please reach out to the PKI support team.