Certificate Advice

[NithinJohny]

Dear Support ,

Please advice how I can complete it .

SSL Certificate Security Updates
 

Hello Admins, 
 
As we mentioned in our April 6th communication to you, we are making an effort to implement best-practices for authentication providers in Canvas. We will be mandating valid SSL Certificates from LDAP sources starting June 17th, 2023. 

As a reminder, you have been identified as a customer that has one or more SSL certificates for your LDAP authentication provider(s) that will stop working on June 17th, 2023 if no action is taken. Because LDAP is a third-party authenticator, we cannot make this change on our end, or identify why your SSL certificate is invalid which is why we are reaching out to you ahead of the enforcement date with this information. This may be due to a certificate being invalid, expired, or internally validated. We recommend using TLSv1.2 2019 or TLSv1.2 2021 if you are not already doing so.

It is still highly recommended that you use a public Certificate Authority. However, we are happy to share with you that we’ve added the capability in beta to upload an internal Certificate Authority (CA) in your LDAP configuration. This capability will be available in Production on April 26th.  

As a reminder if you upload your new certificate and want to test it out prior to validation enforcement, please reach out to your CSM and they can enable the certificate validation early, otherwise the validation will be enforced June 17th, 2023.

[scott_groomes]

We need to use internal certificates for authentication because our LDAP/AD domain is a .local  -- I uploaded our certificate to our Canvas Beta server through the authentication menu and it uploads with no errors. However, when I check the verify TLS certificate box the authentication breaks and no one can login to Canvas Beta. Looking for help. I contacted our CSM but they told us to go ask the community for help. 

[diana_medina]

Hi Scott

Could you solve this problem?

We have the same issue. Could you share the solution?

Thks,

[jabetrue]

Were able to find a solution to this Diana? Thanks!

[jabetrue]

Hi Scott - same question as Diana - we're trying to resolve this exact issue and haven't gotten anywhere. Were you able to find a solution?

Thanks!

[JeffW · Accepted solution]

Hi @NithinJohny,

Reaching out to your CSM or submitting a support ticket to Canvas would be the best course of action. Your CSM should be equipped to handle such requests. If not, then you should be able to source guidance from the Canvas Support team.