Changes to Print Audit Web Server Certificates



What changed and when?


Print Audit changed it's web server certificates to use SHA-2 on April 7th, 2016.

Why is it changing?


Many websites use an algorithm called SHA-1 in signing their security certificates but this technology is nearly 20 years old.  SHA-1 is being phased out officially by companies such as Microsoft and Google.  Print Audit, in keeping with industry-wide best practices, will be upgrading our security certificates to use the newer and more secure SHA-2.

How does the change affect me or my customers?


For computers with Windows Vista, Windows Server 2008 or better, you won’t notice any change.  Support for SHA-2 based certificates is already built into these operating systems.  For older versions of Windows, you will need to verify that they have the required hotfix or service patch to use SHA-2 based certificates.

Windows XP - requires SP3.  

Windows Server 2003 - requires SP1 or SP2 and Microsoft Hotfix 938397.

If these aren’t applied, the computer may be unable to validate the certificate when connecting to any web site using SHA-2 based certificates for SSL (secure HTTP).

For additional information regarding SHA-2 compatible operating systems and web browsers, please visit the following site:  https://www.digicert.com/sha-2-compatibility.htm

What Print Audit Products will be Affected?


ICE software installed on the older Windows operating systems mentioned above may generate the following error:

ICE was unable to verify your license: Soap call "VerifyLicense" failed.  Error: Unexpected error occurred: 12175.

ICE Error.jpg 11.85 KB


This error occurs whenever the ICE software is unable to properly authenticate to the Facilities Manager server.  


You will be unable to access Facilities Manager using older browsers or older operating systems that are not SHA-2 compatible as mentioned above.


Other Print Audit products should be unaffected by this update. However we recommend that customers still ensure that older Windows operating systems have the latest updates applied.


What else may cause certificate problems?


Print Audit servers use GoDaddy  as our certificate authority.   Windows updates would normally include GoDaddy as a Trusted Certificate Authority but it is possible for these updates to be disabled or not applied.  To check that the computer running any Print Audit product is able to use GoDaddy certificates, please click here.

How did we do with this article?

Infinite Device Management