Discussions related to using object storage as a backup target.
Post Reply
dariusz.tyka
Enthusiast
Posts: 57
Liked: 4 times
Joined: Jan 21, 2019 1:38 pm
Full Name: Dariusz Tyka
Contact:

AWS S3 certificate switch from Digicert to Amazon Trust Services

Post by dariusz.tyka »

Hi,

do we need to perform any actions on our side as our Veeam servers are talking directly with AWS S3? See message from AWS below:

Hello,

This is a reminder that Amazon Simple Storage Service (S3) and Amazon CloudFront are both migrating their services’ certificates from DigiCert to Amazon Trust Services starting March 23, 2021. If you do not send HTTPS traffic directly to your S3 bucket, or only use custom domains like www.example.com with your CloudFront distribution, then there is no impact and you can disregard this message. If you do send HTTPS traffic directly to your S3 bucket, or use CloudFront domains covered by *.cloudfront.net, please continue reading and review the FAQ below on which certificates are migrating.

The Amazon Trust Services Certificate Authority originates from AWS’ purchase of the Starfield Services Certificate Authority which has been valid since 2005. This means you shouldn’t have to take any action to use the certificates issued by Amazon Trust Services as it is already included in common trust stores across most web browsers, operating systems, and applications. However, if you build custom certificate trust stores or use certificate pinning, you may need to alter your configurations. As a best practice, we recommend verifying Amazon Trust Services is in your trust store with one of the following tests.

Dariusz
Gostev
Chief Product Officer
Posts: 31712
Liked: 7217 times
Joined: Jan 01, 2006 1:01 am
Location: Baar, Switzerland
Contact:

Re: AWS S3 certificate switch from Digicert to Amazon Trust Services

Post by Gostev »

Hi, it looks like all the OS we support for installing Veeam Backup & Replication and its components already support Amazon Trust Services certificates since many years ago:
Microsoft Windows versions that have January 2005 or later updates installed, Windows Vista, Windows 7, Windows Server 2008, and newer versions.
Red Hat Enterprise Linux 5 (March 2007), Linux 6, and Linux 7 and CentOS 5, CentOS 6, and CentOS 7
Ubuntu 8.10
Debian 5.0
dariusz.tyka
Enthusiast
Posts: 57
Liked: 4 times
Joined: Jan 21, 2019 1:38 pm
Full Name: Dariusz Tyka
Contact:

Re: AWS S3 certificate switch from Digicert to Amazon Trust Services

Post by dariusz.tyka »

Hi,

thanks Gostev for prompt answer.
Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests