InCommon Operations Notifications

[Tom Scavo <>]

You are receiving this message because you are a Site Administrator
for the InCommon Federation. This is FYI ONLY. No immediate action is
required.

In the last few months, InCommon Operations has encountered two
significant interoperability “incidents” (but it’s likely there were
others we didn’t hear about) that were subsequently traced to improper
migration of certificates in metadata. When migrating certificates in
metadata, site administrators are advised to carefully follow the
detailed processes documented in the wiki.
(https://spaces.internet2.edu/x/vAEFAQ) These processes have been
shown to maintain interoperability in the face of certificate
migration, which tends to be error prone.

For more details about the pitfalls of certificate migration, read
this recent blog post: https://spaces.internet2.edu/x/FobFAg

Please share this information with your delegated administrators. By
the way, if you’re not using delegated administration
(https://spaces.internet2.edu/x/7ZiKAQ) to manage SP metadata, please
consider doing so since this puts certificate migration in the hands
of individuals closest to the SP.

-----
InCommon Operations