Verifone (formally Commidea) have recently been sending letters out to our Verifone customers titled - ‘Renewal of SSL certificate’. We were first notified of this on the 12th of Jan and have been investigating the implications of the letter for our customers. After speaking to Verifone we now have a plan of action.
What is an SSL certificate renewal?
The technical answer:
SSL Certificates are small data files that digitally bind a cryptographic key to an organisation's details. When installed on a device, it activates the padlock and the https protocol (over port 443 and https) and allows secure connections from a web server to a browser. These certificates need renewing every 1-10 years.
The basic answer:
They allow 2 devices to talk securely over a network or the internet and are most common on websites that take card payments.
Isn’t this the SSL certificate that I pay Roeville for every 3 years?
It’s the same concept but the one you buy from us allows your customers to browse your WebRes website using https as well as http. For example https://www.roeville.com. Traffic over https is more secure than http.
The certificates mentioned in the letter are the ones that your verifone card processing system uses to allow your t28\t3\ph28 server to transmit card data securely to Verifone. All certificates have expiry dates and need to be renewed. VeriFone’s letter is stating that theirs will expire on the 26th of Jan 2015.
What does this mean to me?
The ssl certificates that allows your PC’s to transmit secure card data to Verifone live on your t28\t3\ph28 server. Once these expire (26th Jan 2015) then your card payments may cease to work on all Roeville packages, including your website.
How do I renew the certificate?
Your IT guys will need to install the certificates from the link below. The file will need unzipping first. This should be a very quick and easy process. They should be installed as a local machine certificate on your t28\t3\ph28 servers and also any machines that are used to access the WebCom website.
Verifone’s letter states that the failure to follow this action could result in a loss of card processing.
Download the new SSL certificates here:
If you have any questions then please don’t hesitate to call us for more advice.