TL:DR: Signagelive needs to take action as our global root certificate will undergo changes due to the old certificate starting to be distrusted by Mozilla ahead of the expiration date. Our TLS certificate is therefore being renewed, and the new certificate will use the G2 root certificate instead of the current G1 version. The following email provides insight into the process, and guides users with either Tizen 2.4 or LG webOS 2.0 Media Players to take action.

Hello ,

We wanted to let you know that our Global Root Certificate has been changed, due to the old certificate starting to be distrusted by Mozilla ahead of the expiration date. Our TLS certificate is therefore being renewed and requires you to now take action as per this email.

To assist your understanding of this email, please see definitions behind some key and repeated terms used throughout this email. We hope this makes things clear for you.

Back in 2020/21, if you were using Signagelive, you may recall a series of emails regarding our efforts in ‘Restricting the use of TLS 1.0 and 1.1 to only media players that do not support TLS 1.2 and above and preventing all other connections to our APIs from using those older protocols’.

Whilst restricting the use of TLS 1.0 and 1.1, we added the Signaglive NENA endpoints for certain Media Players to ensure their continuation of service and now we need to conduct this process again as before, but just for the LG webOS 2.0 and Samsung Tizen 2.4 devices.

We now refer back to this process in relation to the Global Root Certificate:

This change is taking place because our Global Root Certificate is being replaced with a new one by our TLS Certificate Issuer in September 2023, so we are going to renew in advance. The current certificate will become distrusted by Mozilla in 2026, so the provider is migrating all new certificates now.

Unfortunately the new root certificate is not supported on all Signagelive Media Players and so we must follow due process to mitigate any potential issues.

Whilst TLS root certificates last a very long time (ie. 10+ years) they do eventually need to be renewed and so therefore we must take this action. A root certificate is the most critical part of the SSL protocol as any certificate signed with its private key information will be trusted by all browsers readily, hence we recognise the importance of making this change.

Rest assured there’s nothing to be concerned about. Our TLS Certificate issuer is supporting us by enabling us to use both the old (G1) and new (G2) root certificates for the time being, however let’s look how the different Signagelive platform areas that will be impacted and what actions need to be taken:

For our User Interface and associated API, we must switch to the new (G2) certificate as Mozilla is removing support for the older (G1) certificate. This decision is a direct consequence of the new Mozilla roots management policy that stipulates a maximum period for the use of root certificates. As of 2025, Mozilla will begin distrusting older root certificates including DigiCert ones.

In relation to our Signagelive Media Players:

Our primary endpoint eventually will be updated to the new (G2) certificate. With the old (G1) certificate however, we need to migrate older Media Players to our NENA endpoint; which includes the LG webOS 2.0 and Samsung Tizen 2.4 models.

We require users with LG webOS 2.0 and Samsung Tizen 2.4 devices to ensure they can connect to the following IP Addresses and Domains ahead of the proposed dates below. Failure to do so could result in your devices not being able to connect to the Signagelive service.

The new IPs and domains are:

Yes; our TLS certificate expires in September 2023, so we are renewing early and will be following this events schedule: