Description of upcoming changes

The Certificate Authority for Commerce platform, Orbital and netConnect is changing from Entrust to DigiCert.

Background

As of November 1, 2024, Google no longer ‘trusts’ Entrust certificates. Effective July 1, 2025, JPMC will migrate from Entrust certificates to DigiCert certificates. This change will enhance overall security and processing performance.

What this means for Commerce platform and Orbital clients

If you connect via APIs:

The DigiCert certificate must be installed in your certificate store.

Orbital Clients: If you have Developer Center access, the DigiCert certificates (DigiCert Global Root G2 Serial Number: ‎03 3a f1 e6 a7 11 a9 a0 bb 28 64 b1 1d 09 fa e5) can be downloaded. The certificates are located under Documentation – Connectivity Solutions – Orbital SSL Certificates.

Or

DigiCert can also be obtained directly from here.

Commerce platform: DigiCert can also be obtained directly from here.

Please note, for all clients, only add the DigiCert certificate. Do not remove the current EnTrust certificate.

Testing in our VAR environment is now available.

What this means for NetConnect clients

If you connect via terminals:

JPMC managed terminals (Class A) have no impact. No action needed.

Non JPMC managed (Class B & C) terminals, certified integrators and third parties using a NetConnect SSL connection must ensure that the DigiCert root certificate, available for download on the Developer Center, is included in their trusted certificate store for terminals before July 1, 2025.

Clients who use an integrator should expect to receive a communication from their integrator advising of next steps. If you do not receive a communication from your integrator, please contact your integrator to determine your impact and next steps. If you turn your terminal off at night or have backup terminals, please ensure that they are turned on so that they can receive the update.

If you directly connect:

The DigiCert certificate must be installed in your certificate store.

DigiCert certificates (DigiCert Global Root G2 Serial Number: ‎03 3a f1 e6 a7 11 a9 a0 bb 28 64 b1 1d 09 fa e5) can be downloaded from Developer Center. The certificates are located under Documentation – Connectivity Solutions – NetConnect SSL Certificates.

DigiCert can also be obtained directly from DigiCert.

Note: NetConnect Batch clients, clients who connect via MPLS or via a VPN are not impacted by this change. No action is needed.

Only add the DigiCert certificate. Do not remove the current EnTrust certificate.

Testing in our VAR environment is now available.