Transact incident
Urgent Advisory: InCommon Certificate Changes and TSE Compatibility
Ongoing since 10:39 PM UTC, affecting TSE On Premise.
What’s happening InCommon is changing certificate authorities. Certificates issued from its new chain will not work with some TSE devices. In October, the certificate authority behind InCommon’s current certificates announced it is leaving the TLS certificate business, and InCommon finalized its plan for new certificates early this week. Your existing certificate is not immediately affected and continues to work until it expires or is explicitly revoked. InCommon issues certificates only to higher education and research institutions, so Illumia has not yet been able to test with one of the new certificates. Until we can, we don’t know which readers and features will work with them. We are working with a client partner to develop and test the TSE changes needed to support these certificates. Who is affected Clients using InCommon certificates for TSE who have any of the following: SA3032 readers MF4100 or VR4101 readers PR5000 readers Verify devices HostMonitor What to do now If your current InCommon certificate is valid, keep it. Do not renew or replace it with a certificate from InCommon’s new chain. If your certificate will expire soon, or you have already installed a new InCommon certificate, buy a TLS certificate from GoDaddy for your TSE server. Next Steps We’ll post to Statuscast when a TSE update that supports the new certificates is available. Questions? Open a case via Illumia Connect or call 888-381-8054, Option 1.
Affected components
Update timeline
- investigating Nov 11, 2026, 10:39 PM UTC
What’s happening InCommon is changing certificate authorities. Certificates issued from its new chain will not work with some TSE devices. In October, the certificate authority behind InCommon’s current certificates announced it is leaving the TLS certificate business, and InCommon finalized its plan for new certificates early this week. Your existing certificate is not immediately affected and continues to work until it expires or is explicitly revoked. InCommon issues certificates only to higher education and research institutions, so Illumia has not yet been able to test with one of the new certificates. Until we can, we don’t know which readers and features will work with them. We are working with a client partner to develop and test the TSE changes needed to support these certificates. Who is affected Clients using InCommon certificates for TSE who have any of the following: SA3032 readers MF4100 or VR4101 readers PR5000 readers Verify devices HostMonitor What to do now If your current InCommon certificate is valid, keep it. Do not renew or replace it with a certificate from InCommon’s new chain. If your certificate will expire soon, or you have already installed a new InCommon certificate, buy a TLS certificate from GoDaddy for your TSE server. Next Steps We’ll post to Statuscast when a TSE update that supports the new certificates is available. Questions? Open a case via Illumia Connect or call 888-381-8054, Option 1.
Your product runs on more than Transact
Add the vendors you depend on and get one message when any of them reports trouble. Free for 3 vendors, no card.
Amazon Web Services