Entrust distrusted
Join us to discuss the recent Google decision to revoke trust in all Entrust public SSL certificates issued after October 31, 2024, its implications, and how to position Sectigo as a viable alternative to Entrust for your customers.
July 25, 2024 | 11:00 AM ET | 45 Minutes
Why the distrust in Entrust?
- In recent months, Entrust has faced numerous compliance failures, resulting in significant delays in certificate revocations and extensive online discussions.
- Due to these ongoing issues, Google Chrome has decided to revoke trust in all public roots issued by Entrust after October 31, 2024.
- The Google Security Blog cited a "pattern of compliance failures, unmet improvement commitments, and the absence of tangible, measurable progress" over the past six years, leading to the conclusion that "Chrome’s continued trust in Entrust is no longer justified."
- As a result, companies using Entrust public SSL certificates must find a new certificate authority, or their websites will be marked as untrusted on Chrome.
Immediate action required for your customers who use Entrust
Prompt action is required for your customers using Entrust today. Websites with public Entrust certificates issued after October 31, 2024, will be considered unsecured by Google Chrome, with other major browsers likely to follow. To prevent their website from being flagged as untrusted, your customers need to secure a new certificate authority before the deadline.
Sectigo recommends to follow these steps to ensure your customers' websites remain trusted:
Discover & Audit
Identify and catalog all active certificates, focusing on those issued by Entrust that may be affected.
Revoke & Replace
Replace and revoke at-risk certificates at scale leveraging ACME automation protocol for certificate management.
Monitor & Manage
Adopt proactive measures in managing digital certificates, including regular audits, compliance checks, and staying informed about industry developments.
A workshop led by Mark Bloom, Senior Director of Channel Sales
Without any action, newly issued SSL/TLS Entrust certificates will no longer be trusted in the Chrome browser from November onwards. With certificates forming an integral part of an organization’s security posture, there isn’t much time to react.
Join us to learn more about:
- The Entrust certificate distrust: what happened and what to expect
- The Sectigo alternative: how to position Sectigo as a viable alternative to Entrust
- What assets and materials are available to you