certificate pinning

certificate pinning

Dear Customer!

In June 2022, we will remove certificate pinning from our products.

 Over the years, security around the use of certificates has improved significantly. In particular, the threat of man-in-the-middle attacks has been mitigated through the introduction of new security solutions and the wider use of existing security mechanisms. Examples include certificate transparency and the extensive use of certificate revocation lists (CRLs). 

 Since certificate pinning is primarily used to defend against man-in-the-middle attacks, it has become less important as a protection mechanism in recent years. At the same time, by removing pinning, we as operators can act more quickly in an emergency, should a certificate be compromised, for example. 

 Furthermore, certificate pinning causes planning efforts for us as operators every year at the time of certificate change, as well as inconveniences for our customers. For example, many of our customers have to ensure that continuity in the operation of mobile apps in the company's internal device management is guaranteed in the event of a certificate change. 

 With the idgard release scheduled for June 25, 2022, we are removing certificate pinning. In this context, we need to ask for your support one last time, as the removal of pinning and the upcoming certificate change will also require an update of our mobile apps and the productivity tool for Windows

 Therefore, we are happy that we can relieve you from this step in the future by removing the certificate pinning and that no update will be necessary for this from next year on.




What do you need to do? 

 Automatic updates: If automatic updates are enabled for your idgard mobile apps, there is no need for you to take any action

 Manual updates must be performed between June 26 and July 07, 2022 after the release mentioned below is deployed. 

 The idgard productivity tool for Windows will notify you of the availability of the new version via an in-app notification to update the product. To update, please log in to your idgard web account. In the side navigation, go to Help > Customers and select the "productivity tool" link. 

If no updates are possible during this period for the iOS app, the "certificate verification" option can be disabled in the app settings. This must be done between June 26 and July 07, 2022 end of business.

 Otherwise, and also for other tools such as the idgard productivity tool for Windows, the use of these products will no longer be possible after July 07, 2022 until you have updated to the new version. For the idgard Android Lite app, the app update is already required after June 25, 2022.



Dates 
  • June 25, 2022: Planned release of idgard web as well as idgard apps and idgard productivity tool for Windows will be deployed. 
  • July 07, 2022: After this date, the idgard certificate currently in use will expire. 

If you have any questions or comments about this. We will be happy to assist you further. 


Best regards 

Your idgard Team



(C) uniscon GmbH



    • Recent Articles

    • Creating a user with guest license

      You create a person of another company with a guest license to enable him to exchange data in idgard® with other users. If you have created a user with a guest license, you send him the link for his registration. The user creates login data during ...
    • idgard® Update and possible Service Interruption on Saturday 06th of August 2022

      Dear Customer,   We are planning an idgard system update on the evening of August 6, 2022. The update will begin at 9:00 pm and is expected to last until 11:00 pm. We can not guarantee full availability of all idgard features during this period.   ...
    • Move objects within a box

      There are 2 methods to move a file, folder or message. You can use the "Move" function or move these objects using "Drag&Drop". If you want to move the objects of others, you need the right of a creator or administrator of a box. To move your own ...
    • Secure deletion of objects - using the recycle bin

      Once the box creator or mamager has enabled the recycle bin function in your box, you can move items (folders, files, messages) to the recycle bin for deletion. Data moved to the Recycle Bin is not permanently deleted - it can be restored by the box ...
    • Download objects from a box

      If you want to download objects, you need at least the right to read. There are two different methods to download objects. One method is used to download one object, another for multiple objects.  Screenshot to download an object: Proceed as follows: ...
    • Popular Articles

    • Create e-mail template for registrations

      Create e-mail template for registrations This feature is only available in the Enterprise package. If you have the Admin's permissions in the idgard® account, you can write an individual text for the user registration. This text will be used if you ...
    • certificate pinning

      Dear Customer! In June 2022, we will remove certificate pinning from our products.  Over the years, security around the use of certificates has improved significantly. In particular, the threat of man-in-the-middle attacks has been mitigated through ...
    • Welcome to the idgard® online help

      Welcome to the idgard® online help This online help is the main source of information for learning and working with idgard®. Click on one of the following links to obtain further information about idgard®. To use the online help: Search article Enter ...
    • New articles - new functions in idgard® version 1.4

      New functions Permission to view and export journal contents in the Data Room Viewing, querying, and exporting activities in the journal of a Data Room Disclaimer The content of this online help is intended solely for information and documentation ...
    • Isn't encryption on the device the best bet for a safe cloud?

      Isn't encryption on the device the best bet for a safe cloud? The term „cloud computing“ encompasses two aspects: Data storage in a cloud for one’s self, excluding multiple or third-party access. Data processing or storage of information in a cloud, ...