Important LiveUpdate Certificate Expiration Notice

 Problem

An older Symantec root certificate, SymRoot1, will expire on April 30, 2011. With an expired certificate, older LiveUpdate clients would no longer authenticate, download, or install content such as AntiVirus definitions or product updates.

Solution

To allow customers additional time to plan migrations, Symantec has introduced a workaround that allows LiveUpdate to continue to successfully authenticate valid content from Symantec through July 4, 2012. This date may be extended if needed on a product-by-product basis.

In addition, a newer Symantec root certificate, SymRoot2, will expire on August 23, 2020. Newer Symantec products and recently patched products are compatible with SymRoot2. All customers utilizing SymRoot1-based products are recommended to upgrade to SymRoot2-based products.

What is the impact of using SymRoot1 definitions after the certificate expiration?

The product will continue to download and install new updates, such as AntiVirus definitions and product updates. You do not need to do anything to continue to receive definitions for these products after the certificate expiration, but you are encouraged to upgrade to a version that supports SymRoot2 as soon as feasible.

Will products without SymRoot2 support still be able to use Intelligent Updater or Rapid Release to update definitions?

Yes, Intelligent Updater and Rapid Release definition packages will be signed by both SymRoot1 and SymRoot2.

Which products are affected?

The following table shows which product versions support SymRoot2 in green, which product versions will continue to receive SymRoot1 definitions after the certificate expiration in orange, and which product versions require an upgrade in red.

Product

Version

Status

Action Needed

AntiVirus Corporate Edition

10.1 MR 10

SymRoot2 Support

None

AntiVirus Corporate Edition

10.x

SymRoot1 Support

Upgrade recommended

AntiVirus Corporate Edition

9.x

No definitions after 4/30/2011

Upgrade required

AntiVirus for Linux

MR 10

SymRoot2 Support

None

AntiVirus for Linux

MR 9 and earlier

SymRoot1 Support

Upgrade recommended

AntiVirus for Macintosh

10.x

SymRoot2 Support with LiveUpdate 5.1.2

Update to LiveUpdate for Macintosh 5.1.2

Brightmail Gateway

7.7 and later

SymRoot2 Support

None

Brightmail Gateway

5.x through 7.6

SymRoot1 Support

Upgrade recommended

Brightmail Message Filter

All

Does not use SymRoot

None

Client Security

3.1 MR 10

SymRoot2 Support

None

Client Security

3.x

SymRoot1 Support

Upgrade recommended

Client Security

2.x

No definitions after 4/30/2011

Upgrade required

Endpoint Protection

12.0 / 11.0

SymRoot2 Support

None

Enterprise Security Manager

10.x

SymRoot2 Support

None

Enterprise Security Manager

9.x and later

SymRoot2 Support with LiveUpdate 3.3

Update to Windows LiveUpdate 3.3

Enterprise Security Manager

6.5.x

No definitions after 4/30/2011

Upgrade required

IM Manager

8.4.1.16

SymRoot2 Support

None

IM Manager

Prior to 8.4.1.16

SymRoot1 Support

Upgrade recommended

LiveUpdate Administrator

2.x

SymRoot2 Support

None

LiveUpdate Administration Utility

1.5

SymRoot1 Support

Upgrade recommended

Mail Security for Domino

8.0.5 and later

SymRoot2 Support

None

Mail Security for Domino

8.0, 8.01, 8.02, 8.03

SymRoot1 Support

Upgrade recommended

Mail Security for Domino

7.5

SymRoot2 Support

None

Mail Security for Domino

5.x

SymRoot1 Support

Upgrade recommended

Mail Security for Domino

4.x and earlier

No definitions after 4/30/2011

Upgrade required

Mail Security for Domino MPE

3.2

SymRoot1 Support

Upgrade or Java LiveUpdate patch recommended

Mail Security for Domino MPE

3.0

No definitions after 4/30/2011

Upgrade required

Mail Security for Exchange

6.5

SymRoot2 Support

None

Mail Security for Exchange

6.0.x

SymRoot2 Support

None

Mail Security for Exchange

5.0.x

SymRoot1 Support

Update recommended

Mail Security for Exchange

4.6

SymRoot1 Support

Upgrade recommended

Mail Security for Exchange

4.5 and earlier

No definitions after 4/30/2011

Upgrade required

Mail Security for SMTP

5.x

SymRoot1 Support

Upgrade recommended

Scan Engine

5.2.8

SymRoot2 Support

None

Scan Engine

5.2.7 and earlier

SymRoot1 Support

Upgrade recommended

Security Information Manager

4.7 MP3 (release TBD)

SymRoot2 Support

None

Security Information Manager

4.7.2 and earlier

No updates after 4/30/11

Upgrade required

 My product version will not be updated. How do I upgrade?

If possible, Symantec recommends that you upgrade to a version that supports SymRoot2. SymRoot2 compatible products appear in green in the table above. You can download the latest version of your product from File Connect or from the Business Critical Services Web site.

For some products, you may need to apply patch instead of upgrading. For additional assistance, the Technical Assistance Center line is available to provide support (540) 443-3398 or contact your ALI representative for further assistance.