{"id":7337,"date":"2026-05-12T11:00:56","date_gmt":"2026-05-12T08:00:56","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=announcement&p=7337"},"modified":"2026-10-19T13:11:41","modified_gmt":"2026-10-19T10:11:41","slug":"tls-certificate-provider-update-for-guts2-backend-may-19-2026-2","status":"publish","type":"announcement","link":"https:\/\/support.withsecure.com\/en\/announcements\/tls-certificate-provider-update-for-guts2-backend-may-19-2026-2\/","title":{"rendered":"TLS certificate provider update for GUTS2 backend (May 19, 2026)"},"content":{"rendered":"

We would like to inform you about an upcoming change to the TLS certificates used by the WithSecure GUTS2 Server (definition update backend), planned for May 19, 2026<\/strong>.<\/p>\n

We are transitioning from DigiCert to Let\u2019s Encrypt certificates. This update aligns our backend infrastructure with our existing services, where Let\u2019s Encrypt is already in use, and helps us streamline certificate management while maintaining industry\u2011standard security practices.<\/p>\n

What does this mean for you?<\/strong><\/h2>\n
    \n
  • No changes are expected for the majority of environments.<\/li>\n
  • The change will be transparent if your system trusts the ISRG Root X1<\/strong> certificate (the root certificate used by Let\u2019s Encrypt).<\/li>\n<\/ul>\n

    Common environments where no action is required:<\/strong><\/h2>\n
      \n
    • Windows systems with Windows Update enabled<\/li>\n
    • Environments where automatic root certificate updates are allowed (not restricted by GPO \/ MDM policies)<\/li>\n
    • Systems where ISRG Root X1 is not explicitly removed or blocked<\/li>\n<\/ul>\n

      When action may be needed:<\/strong><\/h2>\n
        \n
      • Systems with restricted certificate updates<\/li>\n
      • Environments with custom trust stores<\/li>\n
      • Devices where ISRG Root X1 is missing or not trusted<\/li>\n<\/ul>\n

        In such cases, please ensure that the ISRG Root X1<\/strong> root certificate is present in your trust store.<\/p>\n

        WithSecure products currently require the following root certificates for TLS communication to WithSecure backends, therefore must be present on all machines, across all Operating Systems:<\/p>\n

          \n
        • Amazon Root CA 1\u00a0<\/li>\n
        • Amazon Root CA 2\u00a0<\/li>\n
        • Amazon Root CA 3\u00a0<\/li>\n
        • Amazon Root CA 4<\/li>\n
        • Starfield Class 2 Certification<\/li>\n
        • Starfield Services Root Certificate Authority \u2013 G2\u00a0<\/li>\n
        • DigiCert Global Root CA\u00a0<\/li>\n
        • ISRG Root X1<\/li>\n
        • ISRG Root X2<\/li>\n<\/ul>\n

          All of these are included in the default trust stores of modern, up-to-date operating systems and should not require manual installation in the majority of deployments.<\/p>\n","protected":false},"excerpt":{"rendered":"

          We would like to inform you about an upcoming change to the TLS certificates used by the WithSecure GUTS2 Server (definition update backend), planned for May 19, 2026. We are…<\/p>\n","protected":false},"template":"","announcement_category":[142],"class_list":["post-7337","announcement","type-announcement","status-publish","hentry"],"acf":{"source_system":"vanilla-import","import_hash":"f1982735c710193a0cd68efeb7dbe631c895d230","vanilla_article_id":32925,"legacy_author":"AndyF_WS","vanilla_url":"https:\/\/community.withsecure.com\/announcements-en\/kb\/articles\/32925-tls-certificate-provider-update-for-guts2-backend-may-19-2026","vanilla_category_id":142,"machine_translated":false},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/7337","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/announcement"}],"version-history":[{"count":1,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/7337\/revisions"}],"predecessor-version":[{"id":8865,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/7337\/revisions\/8865"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=7337"}],"wp:term":[{"taxonomy":"announcement_category","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement_category?post=7337"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}