Idira Identity Cloud Service Advisory - Partial Performance Degradation

We've fixed the core issue, and are waiting for things to recover.

We've confirmed there is a problem, we're working to resolve it.

Customer might face login failures caused by an untrusted SSL certificate chain on legacy OS

Root Cause:

Certificate Rotation: Platform build 26.15-205 switched the .my.idaptive.app ,.id.cyberark.cloud certificate to a new CA chain rooted at GlobalSign Root R46.

Missing Root Trust: Microsoft added GlobalSign Root R46 to the Windows Trusted Root CTL on November 28, 2023. Any OS having EOL before that, will not receive this automatic update, causing SSL handshakes to fail with a "remote certificate is invalid" error.

Resolution: Download the GlobalSign Root R46 certificate (https://support.globalsign.com/ca-certificates/globalsign-root-certificates) Manually install it on the AD Proxy machine using the following command: Bash certutil -addstore Root GlobalSignRootR46.crt Restart the AD Proxy service, which will resolve the SSL handshake failures and will restore logins.