Cisco announces the end-of-life dates for the Umbrella Virtual Appliance versions prior to 3.4.5. Software maintenance support for Virtual Appliance for versions lower than 3.4.5 will end on March 31, 2024, due to a discontinuation of older Digicert CA.
VA (Virtual Appliances) stopped syncing with Cisco Umbrella (api.opendns.com) in April 2023 following Cisco’s rotation of server certificates. The root cause of this issue was the signing of a second generation (G2) DigiCert certificate (DigiCert_Global_Root_CA G2) that was not in the Virtual Appliance trusted CA list. Cisco resolved the issue by rolling back to the former root CA.
However, this solution will work only until March 31, 2024, after which certificates will be required to be signed by the new root CA (G2). All the DigiCert certificates have been included in the version upgrade 3.4.5, thus the only action required by you is to upgrade Virtual Appliances to version 3.4.5 or above. If you do not complete the upgrade by March 31, 2024, your Virtual Appliance will stop syncing and you will not be able to upgrade to a higher version. If you do not complete the upgrade by March 31, 2024, you will have to delete and reinstall the Virtual Appliance.
What Action to Take
In case technical assistance is required to upgrade Virtual Appliance to version 3.4.5 or higher, please open an Umbrella Support ticket and provide Remote SSH Tunnel.
To open the support ticket you can:
- Send an email to firstname.lastname@example.org, or
- Submit a support request at https://support.umbrella.com/hc/en-us/requests/new
(For more information on creating a support request please visit https://support.umbrella.com/hc/en-us/articles/360044216911-How-to-Contact-Umbrella-Support-)