//Publications - 21 August 2020

Certificate Services Important Announcement FAQs

Following the announcement that AusCERT Certificate Services will be discontinued, the below FAQs page will be updated as further details become available.

Updated: 21/8/2020

How does this affect my account?
AusCERT will continue to provide Certificate Services for existing customers until 31 December 2021. Your organisation may continue to use the QuoVadis TrustLink platform to manage and issue certificates until 31 December 2021. We hope this will allow plenty of time to evaluate your options and make an informed decision about your ongoing certificate needs.

   How will this affect my certificates?
Certificates can continue to be issued though TrustLink until 31 December 2021 and will remain active through to their expiry date. We are still investigating the cost associated with certificates remaining active past 31 December 2021 with QuoVadis and we will provide an update as soon as possible.

   How long will I have access to TrustLink?
Access to TrustLink after 31 December 2021 will only be available to access and revoke any active certificates. The ability to request new certificates will be removed. Please note, to maintain access to TrustLink you are required to have an active AusCERT Certificate Services subscription. 

We are still investigating the cost associated with certificates remaining active past 31 December 2021 with QuoVadis and we will provide an update as soon as possible.

Note: QuoVadis has confirmed that TrustLink is being phased out, however, there has not been a confirmed date. 


   What options will I have to renew our AusCERT Certificate Services subscription during 2020-2021?
When AusCERT subscriptions are due for renewal, customers will be provided with options to renew for blocks of either 3, 6, 9 or 12 months to allow flexibility with transitioning to other providers. Please note that you are required to maintain your AusCERT subscription while certificates remain active in TrustLink.

The AusCERT Team will contact the nominated invoicing contacts 6-weeks prior to renewal to confirm your preferred subscription renewal length. 

   What is AusCERT doing to assist you with this change and transition phase?  
During our webinar information session hosted on Thursday 20th August 2020, our team provided more clarity, as well as a technical “how-to” on the topic of issuing certificates via alternate sources.

We recommend watching the webinar recording found here and emailing us with any further questions you may have.

Will I still receive access to DigiCert’s CertCentral Platform?
No, you will not obtain access to CertCentral under your current agreement with AusCERT. To obtain access to CertCentral your organisation will need to arrange an agreement directly with DigiCert. Please see below ‘Can I work with DigiCert directly?’ for further details.

Do I have to continue with QuoVadis/DigiCert?
No, you are not obligated to continue with QuoVadis/DigiCert at the end of your contract date. This means your team may work with any Certificate Authority.

   Can I stay with QuoVadis/TrustLink?
QuoVadis will no longer support operations within Australia, as such your organisation will not be able to continue to use QuoVadis’ TrustLink system once your AusCERT subscription has been cancelled.

Note: QuoVadis has confirmed that TrustLink is being phased out, however, there has not been a confirmed date.

   Can I cancel my Certificate Services subscription with AusCERT early? 
When AusCERT subscriptions are due for renewal, customers will be provided with options to renew for blocks of either 3, 6, 9 or 12 months to allow flexibility with transitioning to other providers. Your AusCERT subscription is required to remain active as long as you have active certificates. If you wish to cancel your subscription at the end of renewal, all active certificates will need to be expired or revoked.

Each case is unique, so please email the AusCERT team for your options.

Can I work with DigiCert directly?
You’re not obligated to work with DigiCert. However, AusCERT is working to obtain an introductory discount for AusCERT Members. - Further to be provided as they become available.

 

Next steps to consider: 

We suggest considering the following;

  • Reviewing current active certificates. This will provide your organisation with an overview of total certificates currently issued and provide the ability for an internal review required certificates.
  • Review the type of certificates currently issued by your organisation.

There are a few options to reduce your cost with HTTPS certificates. Please note, we recommend researching all external options prior to deciding which option might be best for your organisation.

  • Let’s Encrypt (https://letsencrypt.org/): A nonprofit Certificate Authority which can be used to issue free TLS Certificates. Let's Encrypt only uses domain validation which may not suffice depending on your requirements. AusCERT hosted a Technical How-To on issuing free of cost certificates via Let’s Encrypt on 20/8 - recording of this presentation can be found here.

  • Hosting Services Providers : Some larger hosting providers (such as Amazon Web Services) offer free or heavily discounted SSL certificates for domains hosted by the provider and in some cases, the provider will manage the lifecycle of the certificate and it’s renewal. You’ll need to contact your Hosting Services Provider to determine if this option is available for your organization. 

If you have any requirements for any of the following certificates then you will need to get in contact with a commercial Certificate Authority:

  • Extended Validation Certificates
  • Code Signing Certificates
  • Document Signing Certificates
  • S/MIME Certificates
  • Gird Certificates

If you have any questions regarding this announcement please email us. If you prefer to discuss these changes, please contact us and we will schedule a teleconference.