Scheduled Service Change: End of Support for Email Validation of AWS Certificates
Event:
2024-07-01 08:00:00
Expected Duration:
2024-07-01 08:01:00
Status:
Open
Brief Description:
As of July 1, 2024 Cornell will no longer support email-based validation for new or renewing certificates from AWS Certificate Manager, for certificates in cornell.edu, cucloud.net and other domains managed by the Cornell DNS database (DNSDB).
User Impact:
Emailed requests for certificate validation from AWS Certificate Manager to cornell.edu, cucloud.net (and other DNSDB-managed domains) domain contacts will not be processed by CIT Cornell support staff as of July 1, 2024.
Services Affected:
Cloudification
Subsites Affected:
Cloudification
Full Description:
As of July 1, 2024 Cornell will no longer support email-based validation for new or renewing certificates from AWS Certificate Manager, for certificates in cornell.edu, cucloud.net and other domains managed by the Cornell DNS database (DNSDB). DNS-based validation has been available from AWS Certificate Manager since 2017, and is a much more secure and efficient validation process compared to email-based validation. Cornell AWS customers that have existing email-validated certificates from AWS already have been contacted directly about the need to switch to DNS-validated certificates before their current email-validated certificates expire. More details available here.
CIT TDX ID:
1381938
Timeline of Changes
| Description | Current Status | Date | Time |
|---|---|---|---|
As of July 1, 2024 Cornell will no longer support email-based validation for new or renewing certificates from AWS Certificate Manager, for certificates in cornell.edu, cucloud.net and other domains managed by the Cornell DNS database (DNSDB). DNS-based validation has been available from AWS Certificate Manager since 2017, and is a much more secure and efficient validation process compared to email-based validation. Cornell AWS customers that have existing email-validated certificates from AWS already have been contacted directly about the need to switch to DNS-validated certificates before their current email-validated certificates expire. More details available here. |
2024-05-03 | 08:32:11 |