New Certificates (467)

Proper forum for all questions related to xServer INTERNET = the Azure based cloud solution. This forum deals with the architecture topics such as load balancing, available profiles and standard server settings.
Please be aware that questions about core functionality such as routing, mapping, geocoding in general should be placed in the xServers dedicated forum ;-)
Post Reply
User avatar
MISTERX
Posts: 53
Joined: Mon Jun 02, 2014 11:50 am

New Certificates (467)

Post by MISTERX »

We are using SAP. In SAP-Systems the certificates are loaded and stored via Tx STRUST. This will be done by admin. SAP-Systems do not load certs automatically. But a SAP-System generates notices a few days in advance, before actual cert will be invalid.
Yesterday PTV has published new cert - old cert was valid till November, 19th, EOD.
This has happened almost 5 days before validity of actual cert ends.

We were facing the issue, that new cert was active before SAP-System has triggered the coming end of validity and admins missed to renew in STRUST. So at the end SAP-Users were suddenly no longer able to work, because SAP-System was not able to consume PTV-Internet-Services.

To make the long story short: Did anybody know if the renewal of certs by PTV is generally 5 days before end of validity?
f.gailfuß
Posts: 8
Joined: Fri Sep 16, 2016 8:02 am

Re: New Certificates (467)

Post by f.gailfuß »

From PTV perspective: Certificate updates are always done a few days in advance leaving us enough time to react to deployment problems that might arise. In the past the certificate updates went perfectly smooth, at least from what we know.

Although using renowned certificate providers, we've just learned that the certificate rollout is not always an automatic process but might require manual steps on some systems. Because of this we're going to handle upcoming certificate updates like any other deployment update and announce it in advance.
Frank Gailfuß
PTV GROUP Germany
User avatar
MISTERX
Posts: 53
Joined: Mon Jun 02, 2014 11:50 am

Re: New Certificates (467)

Post by MISTERX »

Cheers Frank

sounds like a good plan. This will help us!

How (and to whom) the announcement will be published? I personally prefer mail to dedicated receivers - like known technical contacts at customer site.

Is this feasible.
Mr. X
  • Integration PTV <> SAP
  • Senior Consultant

________________________________________________

Optimism is only a lack of data!
User avatar
Bernd Welter
Site Admin
Posts: 2564
Joined: Mon Apr 14, 2014 10:28 am
Contact:

Re: New Certificates (467)

Post by Bernd Welter »

Hello Rolf,
  • For custom clouds we have individual email recipients lists (be aware that your special addresses are part of it)
  • For xServer INTERNET we inform all email addresses who have access to the affected PRODUCTION service (this is based on a webshop).
Best regards Bernd
Bernd Welter
Technical Partner Manager Developer Components
PTV Logistics - Germany

Bernd at... The Forum,LinkedIn, Youtube, StackOverflow
I like the smell of PTV Developer in the morning... :twisted:
Post Reply