Skip to main content
Question

Apple is distrusting Symantec CA

  • July 4, 2018
  • 3 replies
  • 36 views

gda
Forum|alt.badge.img+10

Apple seems to start distrusting Symantec certificate authorities starting from July 20, 2018.
See https://support.apple.com/en-us/HT208860

Will this have an impact on the Symantec PKI settings and certificates in Jamf Pro?

3 replies

Forum|alt.badge.img+23
  • Esteemed Contributor
  • July 4, 2018

Slim to nothing.

The Symantec PKI is an enterprise tool for internal cert use. The depreciated certs in that KB are for the public internet.


jconte
Forum|alt.badge.img+12
  • Valued Contributor
  • July 10, 2018

The problem for us is that we use these certs for our in building wifi across the enterprise and our Macs will break because they can't update the cert until Windows (50,000+) get the new certs. Does anyone know how these are distributed to Mac's ? SWU ?

we are working on some possible alternatives but 2 weeks isn't giving us much time, hoping there is a way to temporarily prevent until we get a workaround.

Thanks


gda
Forum|alt.badge.img+10
  • Author
  • Contributor
  • July 12, 2018

I think there will be a SWU available to distrust the Symantec CA's. Maybe it's already integrated in 10.13.6. Or it comes with some if the critical background updates.

But since @franton mentioned that Symantec PKI is a tool for internal cert use, the certs may not signed against a public available Symantec CA.