Cloud SSL Certificate Updates

• Cloud SSL certificates for Identity services (*.auth.konycloud.com), App services (*.konycloud.com), and Sync services (*.sync.konycloud.com)

• Note: If you have not pinned Kony certificates in your application, no application updates will be necessary. Customers that have pinned SSL certificates will need to download the new certificates and update their applications to trust old and new certificates and distribute their updated applications. The new certificates can be downloaded by executing the following commands:

  • Identity: openssl s client -showcerts -connect konycertificatepreview.auth.konycloud.com:443

  • App: openssl s client -showcerts -connect konycertificatepreview.konycloud.com:8443

  • Sync: openssl s client -showcerts -connect konycertificatepreview.sync.konycloud.com:9443

• Customers who have pinned the public key instead of the full certificate may not be required to update their applications. The updated certificates will have the same public keys as the existing certificates.

• If necessary, you can submit your applications for expedited approval (e.g., Apple has an expedited approval process for critical bugs, or in this case, pinned certificates).

Customer applications that have pinned SSL certificates will need to be updated as described above.