Is this website authentication info relevant to us as Blackbaud / LO users?

Grace Rose Khalsa

From a (great!) listserve I'm on, this info hit my radar today, regarding Google's plan to set Chrome to "distrust Symantec website authentication certificates" beginning possibly as early as March 15, 2018. Symantec-based certificates include these well-known names: Thawte, VeriSign, Equifax, GeoTrust, and RapidSSL. Here's the link to the article from Googleblog: https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html


My questions: does this have any relevance to us as Blackbaud users? Is BB already on top of this issue? Is there anything any of us need to be aware of or do, especially (of course) in regard to donation forms?


I look forward to everyone's thoughts!

Thanks,

Gurukarm

Erik Leaver

Hi Gurukarm,


Yes, Blackbaud is very aware of these changes. If you do NOT have a custom secure domain, then you don't need to do anything. Blackbaud is working to update all of the certificates that you rely on for your secure transactions, surveys, etc..


If you do have a custom secure domain, you'll need to renew your certifcate.


We have a detailed knowledgebase article on the topic:  https://kb.blackbaud.com/articles/Article/115224


Best,

Erik