Update - All CertiNext ACME EAB credentials have been migrated to SSL.com certificate profiles overnight by CertiNext.
Administrators can force renewals via ACME to issue a certificate with the new SSL.com certificate chain.
For additional questions or for further assistance, please contact security@tamu.edu.
Nov 12, 2026 - 09:02 CST
Administrators can force renewals via ACME to issue a certificate with the new SSL.com certificate chain.
For additional questions or for further assistance, please contact security@tamu.edu.
Nov 12, 2026 - 09:02 CST
Update - This is a follow-up to our October 26th update regarding the eMudhra certificate authority compromise. Since our last update, certificate providers and browser vendors have announced additional changes that will require further action.
What You Need to Know:
- All eMudhra certificates must be replaced by November 16, 2026. This includes RSA certificates issued as replacements in October. Microsoft will stop trusting the remaining eMudhra certificate authorities on November 16th, with Apple Safari following on November 30th.
- A new certificate authority is available. InCommon began issuing certificates through SSL.com on November 9th.
- Let's Encrypt users are unaffected. If you have already migrated to Let's Encrypt, no further action is required.
What Actions Are Required?
If you use the TAMU ACME proxy:
The proxy will transition to SSL.com at the end of today, November 11th. After the transition, force a certificate renewal to receive a certificate issued through the new provider. No support ticket is required.
If you use EAB credentials through CertiNext:
Your credentials will automatically transition to the new certificate chain before November 16. Additional details will be provided as they become available.
If your systems connect to other services:
Some systems maintain their own trusted certificate lists and do not automatically receive updates. System administrators should:
- Apply available certificate updates to Linux servers.
- Rebuild and redeploy containers after updating their base images.
- Apply available updates for Java, .NET, and Node.js environments.
- Check with appliance and software vendors to confirm compatibility with SSL.com certificates.
Before deploying replacement certificates, verify that systems connecting to them trust the new SSL.com certificate chain.
Important: Do not manually modify system certificate trust stores to work around compatibility issues. This can cause problems with other secure connections. Contact us if you believe an exception is necessary.
Additional Information
Chrome and Firefox are expected to stop trusting newly issued eMudhra certificates after November 16th. However, existing certificates may continue temporarily working in those browsers. This does not prevent compatibility issues with Windows and Apple devices.
This situation may continue to evolve as vendors update their certificate trust policies. We encourage system administrators to automate certificate renewals wherever possible to simplify future transitions.
Further updates will be made when information becomes available.
For additional questions or for further assistance, please contact security@tamu.edu.
Nov 11, 2026 - 18:25 CST
What You Need to Know:
- All eMudhra certificates must be replaced by November 16, 2026. This includes RSA certificates issued as replacements in October. Microsoft will stop trusting the remaining eMudhra certificate authorities on November 16th, with Apple Safari following on November 30th.
- A new certificate authority is available. InCommon began issuing certificates through SSL.com on November 9th.
- Let's Encrypt users are unaffected. If you have already migrated to Let's Encrypt, no further action is required.
What Actions Are Required?
If you use the TAMU ACME proxy:
The proxy will transition to SSL.com at the end of today, November 11th. After the transition, force a certificate renewal to receive a certificate issued through the new provider. No support ticket is required.
If you use EAB credentials through CertiNext:
Your credentials will automatically transition to the new certificate chain before November 16. Additional details will be provided as they become available.
If your systems connect to other services:
Some systems maintain their own trusted certificate lists and do not automatically receive updates. System administrators should:
- Apply available certificate updates to Linux servers.
- Rebuild and redeploy containers after updating their base images.
- Apply available updates for Java, .NET, and Node.js environments.
- Check with appliance and software vendors to confirm compatibility with SSL.com certificates.
Before deploying replacement certificates, verify that systems connecting to them trust the new SSL.com certificate chain.
Important: Do not manually modify system certificate trust stores to work around compatibility issues. This can cause problems with other secure connections. Contact us if you believe an exception is necessary.
Additional Information
Chrome and Firefox are expected to stop trusting newly issued eMudhra certificates after November 16th. However, existing certificates may continue temporarily working in those browsers. This does not prevent compatibility issues with Windows and Apple devices.
This situation may continue to evolve as vendors update their certificate trust policies. We encourage system administrators to automate certificate renewals wherever possible to simplify future transitions.
Further updates will be made when information becomes available.
For additional questions or for further assistance, please contact security@tamu.edu.
Nov 11, 2026 - 18:25 CST
Update - Administrators continue to address certificate-related issues associated with this incident and coordinate with service providers on remaining remediation and longer-term certificate solutions. Additional updates will be provided as they become available.
Nov 04, 2026 - 10:42 CST
Nov 04, 2026 - 10:42 CST
Monitoring - CertiNext has started issuing ECC certificates chained to their "emSign Root TLS CA - G1" root, which is still currently available in the trust stores operated by Mozilla, Google, Microsoft, and Apple.
The ACME proxies, acme-single.it.tamu.edu and acme-multi.it.tamu.edu, have also been restored.
System administrators are now able to issue RSA and ECC certificates as normal.
If you encounter any issues issuing certificates, please reach out to certificates@tamu.edu.
Oct 23, 2026 - 15:06 CDT
The ACME proxies, acme-single.it.tamu.edu and acme-multi.it.tamu.edu, have also been restored.
System administrators are now able to issue RSA and ECC certificates as normal.
If you encounter any issues issuing certificates, please reach out to certificates@tamu.edu.
Oct 23, 2026 - 15:06 CDT
Update - Administrators are still investigating. There is no estimated time to resolution. If you have an urgent need to issue a replacement RSA certificate, please reach out to certificates@tamu.edu.
Oct 23, 2026 - 10:10 CDT
Oct 23, 2026 - 10:10 CDT
Update - Due to the revocation of the "emSign ECC Root CA - G3" root certificate, we are experiencing connection issues with the ACME proxies, acme-single.it.tamu.edu and acme-multi.it.tamu.edu. There is no estimated time to resolution. If you have an urgent need to issue a replacement RSA certificate, please reach out to certificates@tamu.edu.
Oct 21, 2026 - 13:48 CDT
Oct 21, 2026 - 13:48 CDT
Identified - On October 18th, 8 intermediate certificates issued by eMudhra, the CA upstream of CertiNext - our certificate issuance provider, were revoked by the trust stores ran by Mozilla, Google, and Apple. At about 8AM today, Mozilla announced that in addition to the 8 intermediate certificates, they would also be removing the root "emSign ECC Root CA - G3". This root is the trust anchor for ECC certificates issued through CertiNext/Internet 2's Certificate Service. eMudhra has announced that they have immediately stopped issuance from this root in advance of the emergency removal.
Once the root is removed, impacted systems may exhibit secure connection issues with errors such as:
"Your connection isn't private" (Microsoft Edge/Google Chrome/Safari)
"Be careful. Something doesn't look right." (Firefox)
This can also prevent secure connections for automated processes.
We advise that all system administrators utilizing ECC certificates re-issue certificates on affected systems using RSA key types immediately where possible.
For certbot, this can be done via the command line flag --key-type RSA
For simple-acme, this can be done via the command line flag --csr rsa
We will continue providing updates as more information becomes available.
Oct 20, 2026 - 15:44 CDT
Once the root is removed, impacted systems may exhibit secure connection issues with errors such as:
"Your connection isn't private" (Microsoft Edge/Google Chrome/Safari)
"Be careful. Something doesn't look right." (Firefox)
This can also prevent secure connections for automated processes.
We advise that all system administrators utilizing ECC certificates re-issue certificates on affected systems using RSA key types immediately where possible.
For certbot, this can be done via the command line flag --key-type RSA
For simple-acme, this can be done via the command line flag --csr rsa
We will continue providing updates as more information becomes available.
Oct 20, 2026 - 15:44 CDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Nov 11, 2026 - 21:00 CST
Nov 11, 2026 - 21:00 CST
Scheduled - Begin Time: 11/11/2026, 9:00PM
End Time: 11/13/2026, 12:00AM
Details of Maintenance: System administrators will be installing new security patches onto servers that support Identity Management systems. Work will be performed between the hours of 9PM-12AM on the 11th, 12th and 13th of November. During each window, the following services will be updated:
cas.tamu.edu
mqs.tamu.edu
neoweb.tamu.edu
gateway.tamu.edu
u.tamu.edu
tamudirect.tamu.edu
bulkmail.tamu.edu
Impact to Users: Users should experience no interruption in service during the maintenance windows. Maintenance may be complete before the scheduled time. However, the entire window is reserved.
If problems persist after the scheduled maintenance window, please contact the Texas A&M Technology Services Help Desk Central at 979.845.8300 or at helpdesk@tamu.edu for further assistance.
Change ID: 1122692
Nov 11, 2026 21:00 - Nov 14, 2026 00:00 CST
End Time: 11/13/2026, 12:00AM
Details of Maintenance: System administrators will be installing new security patches onto servers that support Identity Management systems. Work will be performed between the hours of 9PM-12AM on the 11th, 12th and 13th of November. During each window, the following services will be updated:
cas.tamu.edu
mqs.tamu.edu
neoweb.tamu.edu
gateway.tamu.edu
u.tamu.edu
tamudirect.tamu.edu
bulkmail.tamu.edu
Impact to Users: Users should experience no interruption in service during the maintenance windows. Maintenance may be complete before the scheduled time. However, the entire window is reserved.
If problems persist after the scheduled maintenance window, please contact the Texas A&M Technology Services Help Desk Central at 979.845.8300 or at helpdesk@tamu.edu for further assistance.
Change ID: 1122692
Nov 11, 2026 21:00 - Nov 14, 2026 00:00 CST
Core Services
Operational
Campus Email
Operational
Canvas
Operational
Duo Multi-Factor Authentication
Operational
Google Apps
Operational
Howdy
Operational
Microsoft 365
Operational
NetID Authentication
Operational
TAMU Campus Internet Connectivity
Operational
Phones and Cellular
Operational
Zoom
Operational
Administrative & Business
Operational
Adobe Sign
Operational
Aggie Educators Portal
Operational
Aggie Schedule Builder
Operational
AggieWorks
Operational
Applicant Information System (AIS)
Operational
Bill Payment Suite
Operational
Camera Systems and Door Access
Operational
FileX
Operational
Financial Aid Portal
Operational
Laserfiche
Operational
Meal Plans Portal
Operational
Parking and Transportation Services
Operational
Flywire
Operational
Communication & Collaboration
Operational
Cable TV, IPTV
Operational
Code Maroon
Operational
Listserv
Operational
Slack
Operational
Infrastructure
Operational
Data Center Services
Operational
Enterprise Backup Solutions
Operational
GitHub
Operational
Private Cloud Services
Operational
Public Cloud Services
Operational
Radio - 800 MHz Radio System
Operational
TTDN
Operational
Virtual Private Network (VPN)
Operational
IT Professional Services
Operational
Axonius Asset Management
Operational
Elastic Security Platform
Operational
Service.tamu.edu
Operational
TLS Certificate Issuance
Operational
Teaching and Learning
Operational
Aggie Virtual Desktop
Operational
Computer Labs and AggiePrint
Operational
MediaSite
Operational
Modern Campus
Operational
Qualtrics
Operational
General Services
Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Scheduled Maintenance
AssetWorks Production Monthly Maintenance Nov 15, 2026 12:00-16:00 CST
Begin Time: 11/15/2026, 12:00PM
End Time: 11/15/2026, 4:00PM
Details of Maintenance: Administrators will be performing maintenance on the AggieWorks service to implement new security updates.
Impact to Users: During the maintenance window, various AggieWorks services (including aggieworks.tamu.edu) may be unavailable or in an offline maintenance mode. Please report facilities issues to the facilities service's communications center using the information provided on the maintenance page.
If problems persist after the scheduled maintenance window, please contact the Texas A&M Technology Services Help Desk Central at 979.845.8300 or at helpdesk@tamu.edu for further assistance.
Change ID: 1119706
Posted on Nov 10, 2026 - 15:10 CST
End Time: 11/15/2026, 4:00PM
Details of Maintenance: Administrators will be performing maintenance on the AggieWorks service to implement new security updates.
Impact to Users: During the maintenance window, various AggieWorks services (including aggieworks.tamu.edu) may be unavailable or in an offline maintenance mode. Please report facilities issues to the facilities service's communications center using the information provided on the maintenance page.
If problems persist after the scheduled maintenance window, please contact the Texas A&M Technology Services Help Desk Central at 979.845.8300 or at helpdesk@tamu.edu for further assistance.
Change ID: 1119706
Posted on Nov 10, 2026 - 15:10 CST
