Is Delinea Down?

<b>Update on scheduling:</b> After additional review and scheduling constraints, we have determined to push this maintenance from October 17th, 2026 to January 23rd, 2027 with the same time window of 4 AM to 2 PM ET. <b>What is happening</b> On January 23rd, 2027 we are rotating the <tt>*.my.centrify.net</tt> certificate. The new certificate is issued by SSL.com, as part of a phased change in the Certificate Authority that issues certificates for Cloud Suite / Privileged Access Service (PAS) domains. Systems whose trusted certificate store does not contain the SSL.com root and intermediate certificates will not validate the new certificate. <b>This change is not limited to one domain.</b> Going forward, all Cloud Suite / PAS certificates are planned to be issued by SSL.com as existing certificates come up for rotation. The SSL.com root and intermediate certificates will be required for those rotations as well, so installing them now prepares your systems for every future change rather than just this one. <b>This is separate from the <tt>centrify.com</tt> rotation completed on August 22, which used Sectigo.</b> Installing the Sectigo certificates does not prepare you for January 23rd. <b>Who this affects</b> This applies to any system that connects to a Delinea PAS or Cloud Suite tenant on <tt>my.centrify.net</tt>, including systems running the Cloud Suite client or the Server Suite agent joined to a cloud tenant, on Linux, Windows, or Solaris, and the Cloud Connector on Windows. Systems joined only to Active Directory with no cloud tenant are not affected, and customers of other Delinea products do not need to take any action. <b>Action required before January 23rd, 2027</b> <b>1. Install the SSL.com certificates</b> Root: <tt>SSL.com TLS RSA Root CA 2022</tt> Intermediate: <tt>SSL.com TLS Transit RSA CA R2</tt> Intermediate: <tt>SSL.com TLS Issuing RSA CA R1</tt> All SSL.com certificates can be downloaded from https://www.ssl.com/repository Both intermediates are required. <b>Add these alongside your existing Sectigo certificates rather than replacing them.</b> The Sectigo certificates are still in use and must stay in place. Per-operating-system instructions are available in our Support KB: https://support.delinea.com/s/article/1772984332766 <b>2. Make sure your systems are fully patched</b> Systems missing operating system security patches are at higher risk of disruption during any service update, and current patch levels help your systems retrieve updated public root certificates automatically. Patching alone is not sufficient for this change, so complete step 1 as well. <b>How to check whether you are ready</b> On Linux, list the SSL.com certificates in your trust bundle. All three should appear. <tt>awk -v cmd='openssl x509 -noout -subject' '/BEGIN/{c=cmd}{print | c}/END/{close(c)}' /etc/ssl/certs/ca-certificates.crt | grep -i "ssl.com"</tt> On Windows, open <tt>certlm.msc</tt> and confirm the SSL.com root appears under Trusted Root Certification Authorities and both SSL.com intermediates appear under Intermediate Certification Authorities. Connecting to your tenant is not a valid readiness test. The current certificate is not SSL.com-issued, so a successful connection today does not confirm you are ready. <b>If the certificates are not installed by January 23rd</b> Affected systems will fail certificate validation and lose connectivity to the service. Nothing is permanently damaged. Installing the certificates and refreshing the trust store restores service, and on Linux it takes effect after restarting the agent. Reach out to <a href="mailto:support@delinea.com">support@delinea.com</a> if you encounter any challenges.

We will be undergoing scheduled maintenance during this time. --- [2026-09-10T09:57:51.653-04:00] (scheduled) After additional review and scheduling constraints, we have determined to push this maintenance from October 17th, 2026 to January 23rd, 2027 with the same time window of 4 AM to 2 PM ET. --- [2026-09-10T09:55:59.586-04:00] (scheduled) We will be undergoing scheduled maintenance during this time. --- [2026-09-10T09:52:46.941-04:00] (scheduled) <b>Update on scheduling:</b> After additional review and scheduling constraints, we have determined to push this maintenance from October 17th, 2026 to January 23rd, 2027 with the same time window of 4 AM to 2 PM ET. <b>What is happening</b> On January 23rd, 2027 we are rotating the <tt>*.my.centrify.net</tt> certificate. The new certificate is issued by SSL.com, as part of a phased change in the Certificate Authority that issues certificates for Cloud Suite / Privileged Access Service (PAS) domains. Systems whose trusted certificate store does not contain the SSL.com root and intermediate certificates will not validate the new certificate. <b>This change is not limited to one domain.</b> Going forward, all Cloud Suite / PAS certificates are planned to be issued by SSL.com as existing certificates come up for rotation. The SSL.com root and intermediate certificates will be required for those rotations as well, so installing them now prepares your systems for every future change rather than just this one. <b>This is separate from the <tt>centrify.com</tt> rotation completed on August 22, which used Sectigo.</b> Installing the Sectigo certificates does not prepare you for January 23rd. <b>Who this affects</b> This applies to any system that connects to a Delinea PAS or Cloud Suite tenant on <tt>my.centrify.net</tt>, including systems running the Cloud Suite client or the Server Suite agent joined to a cloud tenant, on Linux, Windows, or Solaris, and the Cloud Connector on Windows. Systems joined only to Active Directory with no cloud tenant are not affected, and customers of other Delinea products do not need to take any action. <b>Action required before January 23rd, 2027</b> <b>1. Install the SSL.com certificates</b> Root: <tt>SSL.com TLS RSA Root CA 2022</tt> Intermediate: <tt>SSL.com TLS Transit RSA CA R2</tt> Intermediate: <tt>SSL.com TLS Issuing RSA CA R1</tt> All SSL.com certificates can be downloaded from https://www.ssl.com/repository Both intermediates are required. <b>Add these alongside your existing Sectigo certificates rather than replacing them.</b> The Sectigo certificates are still in use and must stay in place. Per-operating-system instructions are available in our Support KB: https://support.delinea.com/s/article/1772984332766 <b>2. Make sure your systems are fully patched</b> Systems missing operating system security patches are at higher risk of disruption during any service update, and current patch levels help your systems retrieve updated public root certificates automatically. Patching alone is not sufficient for this change, so complete step 1 as well. <b>How to check whether you are ready</b> On Linux, list the SSL.com certificates in your trust bundle. All three should appear. <tt>awk -v cmd='openssl x509 -noout -subject' '/BEGIN/{c=cmd}{print | c}/END/{close(c)}' /etc/ssl/certs/ca-certificates.crt | grep -i "ssl.com"</tt> On Windows, open <tt>certlm.msc</tt> and confirm the SSL.com root appears under Trusted Root Certification Authorities and both SSL.com intermediates appear under Intermediate Certification Authorities. Connecting to your tenant is not a valid readiness test. The current certificate is not SSL.com-issued, so a successful connection today does not confirm you are ready. <b>If the certificates are not installed by January 23rd</b> Affected systems will fail certificate validation and lose connectivity to the service. Nothing is permanently damaged. Installing the certificates and refreshing the trust store restores service, and on Linux it takes effect after restarting the agent. Reach out to <a href="mailto:support@delinea.com">support@delinea.com</a> if you encounter any challenges.

Delinea will be upgrading all Cloud Suite pods to version 26.2 on Saturday, September 25th from 4:00 am to 1:30 pm EDT. Short service disruptions should be expected during this maintenance time. Thank you for your patience while this maintenance is performed. If you have any questions or experience any issues, please open a case at https://support.delinea.com or call our support line at +1 202-991-0540.