Over the years, security around the use of certificates has improved significantly. In particular, the threat of man-in-the-middle attacks has been mitigated through the introduction of new security solutions and the wider use of existing security mechanisms. Examples include certificate transparency and the extensive use of certificate revocation lists (CRLs).
Since certificate pinning is primarily used to defend against man-in-the-middle attacks, it has become less important as a protection mechanism in recent years. At the same time, by removing pinning, we as operators can act more quickly in an emergency, should a certificate be compromised, for example.
Furthermore, certificate pinning causes planning efforts for us as operators every year at the time of certificate change, as well as inconveniences for our customers. For example, many of our customers have to ensure that continuity in the operation of mobile apps in the company's internal device management is guaranteed in the event of a certificate change.
With the idgard release scheduled for June 25, 2022, we are removing certificate pinning. In this context, we need to ask for your support one last time, as the removal of pinning and the upcoming certificate change will also require an update of our mobile apps and the productivity tool for Windows.
Therefore, we are happy that we can relieve you
from this step in the future by removing the certificate pinning and that no
update will be necessary for this from next year on.
Automatic updates: If automatic updates are enabled for your idgard mobile apps, there is no need for you to take any action.
Manual updates must be performed between June 26 and July 07, 2022 after the release mentioned below is deployed.
The idgard productivity tool for Windows will notify you of the availability of the new version via an in-app notification to update the product. To update, please log in to your idgard web account. In the side navigation, go to Help > Customers and select the "productivity tool" link.
If no updates are possible during this period for the iOS app, the "certificate verification" option can be disabled in the app settings. This must be done between June 26 and July 07, 2022 end of business.
Otherwise, and also for other tools such as the idgard productivity tool for Windows, the use of these products will no longer be possible after July 07, 2022 until you have updated to the new version. For the idgard Android Lite app, the app update is already required after June 25, 2022.
If you have any questions or comments about this. We will be happy to assist you further.