Próximos cambios en los perfiles de certificados S/MIME

Avoid Disruptions: New S/MIME Standards - SCM changes Effective August 28th, 2023

Dear Customer

We want to bring your attention to an important upcoming change regarding the issuance of publicly trusted S/MIME certificates. This change, driven by the esteemed CA/Browser Forum (CABF), aims to elevate the security and reliability of email communication.

The CABF has recently drafted and approved new Baseline Requirements for the issuance of Publicly Trusted S/MIME certificates, which will take effect on September 1, 2023. These changes will ensure strong encryption algorithms, secure key lengths, and reliable certificate validation procedures.

Why is this important?

Sectigo will cease issuing and renewing old SMIME certificates with the old profiles on August 28, 2023, as a result of these changes. Any S/MIME certificates obtained before August 28, 2023, with the old profile will remain valid until they expire.

What do you need to do?

As a Sectigo Certificate Manager (SCM) customer, you have two options to ensure compliance with these standards:

Option A: Renew your certificates under the existing standards before August 28, 2023.

By proactively renewing any expiring certificates before the cut-off date, you can seamlessly transition to new S/MIME certificates with ease.

Option B: Only an option after August 19, 2023.

1. Validate / Revalidate your organization by following the instructions in SCM.

2. Create new certificate profiles based on the two new certificate templates:

   • Public S/MIME Organization Validation Multipurpose:
     This template includes email and organization information in the certificate.

   • Public S/MIME Sponsored Validation Multipurpose:
     This template includes email, employee name, and organization information in the certificate.

3. Replace the certificate profiles with the new ones in the enrollment endpoints.

4. Issue the new SMIME certificates. See instructions here:
   https://www.sectigo.com/knowledge-base/detail/New-CA-Browser-Forum-Compliant-Public-S-MIME-Certificates-in-SCM/kA05c000000ku9d

To learn more about this upcoming change and the steps you need to take to remain compliant, check out our S/MIME FAQ Infographic:
https://4887240.fs1.hubspotusercontent-na1.net/hubfs/4887240/SMIME_FAQ_Infographic_v2.pdf

We understand that the adoption of new standards may require effort and coordination within your organization. If you encounter any challenges or require assistance during the transition, do not hesitate to reach out to your account manager.
https://www.sectigo.com/contact

We appreciate your attention to this matter, and thank you for being a valued customer.
https://www.sectigo.com/