StrongDM incident

Terraform GPG Certificate Rotation

Major Resolved View vendor source →

StrongDM experienced a major incident on April 28, 2021, lasting —. The incident has been resolved; the full update timeline is below.

Started
Apr 28, 2021, 06:53 PM UTC
Resolved
Apr 28, 2021, 02:00 PM UTC
Duration
Detected by Pingoru
Apr 28, 2021, 06:53 PM UTC

Update timeline

  1. resolved Apr 28, 2021, 06:53 PM UTC

    Hashicorp has rotated its GPG certificates in order to remediate a potential breach of its systems. As a result, strongDM's Terraform provider signatures were invalidated. We have updated the certificate and released a new version. To inherit these changes, you will need to complete the following steps: In the Required Provider's block, update the minimum version to: "1.0.21" as seen below: Once you complete this step, run terraform init before running any form of terraform plan or terraform apply: terraform { required_providers { sdm = { source = "strongdm/sdm" version = "1.0.21" } } } provider "sdm" { # Configuration options } Our Support team is standing by to help troubleshoot if any questions come up.