Huntress Sets October Deadline for Updating Agents Affected by Symantec Certificate Changes
Summary
Huntress said agents version 0.7.85 and older would stop communicating with its servers after October 6, 2018, following changes affecting Symantec-issued certificates. Partners were urged to deploy newer installers.
Key points
- Huntress said agents running version 0.7.85 or earlier would be unable to communicate with its servers after October 6, 2018.
- Browser makers had adopted plans to distrust Symantec-issued certificates, citing certificate-authority compliance and security issues.
- Huntress said its corporate and product websites used certificates from Symantec reseller RapidSSL; it had migrated huntresslabs[.]com to an Amazon-issued certificate.
- Huntress uses certificate pinning so its agents accept tasking from and send data to legitimate Huntress servers.
- The company said it had auto-updated agents since June 2018 and that 98% would not be affected by the deadline.
- Partners were advised to configure deployment software or RMM tools to use an installer newer than version 0.7.85 and check the dashboard for outdated agents.
Article Details
- Event Type
- Certificate distrust and product compatibility change
- Impact
- Browser distrust of Symantec-issued certificates was scheduled to affect Huntress websites using certificates issued by RapidSSL, and Huntress agents running version 0.7.85 and below would be unable to communicate with Huntress servers after October 6, 2018. Huntress reported that 98% of partners’ agents had already been updated and instructed partners to deploy installers newer than version 0.7.85 to avoid service interruptions.