Authorize DigiCert SSL Certificates & Endpoint Changes with Fix
Action Required in October 2024: Authorize.net payment gateway is enforcing the adoption of new endpoints and use of DigiCert certificates. Learn what this means for your store and how to fix it.
If you process credit cards through Authorize or have received an email like this, this article may apply to your store processing payments.
Fixing the Issue for Authorize Gateway Users
-
Due to the Authorize AIM endpoint deadline, we didn’t want our merchants to experience downtime as they wait on the new Authorize API integration release.
-
To account for this, we released an easy-to-install patch for all Support and Updates Plan members to download this Authorize Update (AIM patch) from their ProductCart admin control panel.
- Check under HELP >> Check for Updates and look for "Authorize.net Update (10/18/2024)"
- If you are unable to view the files on your ProductCart admin control panel, or need help renewing your Support and Updates Plan, please reach out to our support team.
NOTE: This update will ONLY fix the changing endpoints, but you'll still need to confirm your hosting company is compliant with the following Authorize Web Hosting Requirements:
If you host with NetSource Technologies or own a ProductCart LIVE website, no other changes are necessary for this Authorize Update to function. For more information about the New Authorize.net API reach out to support or click here.With respect to the upcoming SSL changes at Authorize.net
If your store is hosted by NetSource Technologies, you will not need to do anything. We don’t anticipate any service interruption due to these changes at Authorize.net, but we’ll notify all merchants we host if we detect a problem that will impact service.
If we do not host your store, you should check with your hosting provider or technical contact.
Authorize.net announced that these changes will happen on October 23-24, 2024. The guidance provided in the articles they linked is somewhat vague. The article references a ZIP attachment containing new certificates, which isn’t present. As of October 3, 2024, the test and production endpoints at Authorize.net are still using the Entrust certificate chain. We anticipate that they will update the test endpoints to DigiCert certificates on Oct 23. We cannot test from our servers until they are changed. However, DigiCert certificates are widely accepted so we don’t anticipate any problems.
ProductCart’s Authorize.net integration relies upon the trusted certificates contained in the server’s system store, which should receive updates as long as the server operating system is still in mainstream or extended support. If your site is hosting on an older version of Windows Server (prior to Windows Server 2016), your server operator may need to manually install the latest DigiCert root certificates to ensure error-free operation.
Testing on the web server is just a matter of accessing the following URL using a web browser that uses the system certificate store, such as Microsoft Edge or Google Chrome (testing link below).
When you visit this page, you will get a “403 Forbidden” message, which is okay. You should be able to inspect the certificate in the browser. If it is issued by DigiCert then the endpoint has been updated. If you didn’t receive a certificate warning, then there should be no issues with ProductCart’s Authorize.net integration.
Read more about the DigiCerts change by clicking here.
With respect to the need to upgrade your Authorize.net component on your store:
Due to a different change at Authorize.net, the current Authorize.net gateway in ProductCart will stop working on October 31, 2024, unless you follow the steps in this article to download and install the Authorize Update (10/18/2024) patch. Eventually, all merchants will need to upgrade to the New Authorize.net API to continue using this payment gateway. This solution is still under development.
Read more about Authorize changing endpoints by clicking here.
The reason for this is because the current Authorize.net AIM integration has been depreciated by Authorize, and ProductCart will only be offering and supporting the new Authorize API after we release it for all Support and Updates Plan members.
For a list of other gateways supported by ProductCart, click here.