2026-11-11T22:39:00.0000000Z

What’s happening

InCommon is changing certificate authorities. Certificates issued from its new chain will not work with some TSE devices.

In October, the certificate authority behind InCommon’s current certificates announced it is leaving the TLS certificate business, and InCommon finalized its plan for new certificates early this week. Your existing certificate is not immediately affected and continues to work until it expires or is explicitly revoked.

InCommon issues certificates only to higher education and research institutions, so Illumia has not yet been able to test with one of the new certificates. Until we can, we don’t know which readers and features will work with them. We are working with a client partner to develop and test the TSE changes needed to support these certificates.

Who is affected

Clients using InCommon certificates for TSE who have any of the following:

• SA3032 readers
• MF4100 or VR4101 readers
• PR5000 readers
• Verify devices
• HostMonitor

What to do now

• If your current InCommon certificate is valid, keep it. Do not renew or replace it with a certificate from InCommon’s new chain.
• If your certificate will expire soon, or you have already installed a new InCommon certificate, buy a TLS certificate from GoDaddy for your TSE server.

Next Steps

We’ll post to Statuscast when a TSE update that supports the new certificates is available.

Questions? Open a case via Illumia Connect or call 888-381-8054, Option 1.