none
Bings Maps SSL certificate chain - changing on June15/2013 RRS feed

  • Question

  • We received an email from micorosoft .... and we use BING maps for our BI applications ... trying .....How do I go implement this to our Bing based search web servers .... advise please - thnkz

    Thank you for being a valued Bing Maps Customer.

    As part of our ongoing commitment to security, we are making a change to our SSL certificate chain that will require a small number of customers to take action before June 15th, 2013.

    Bing Maps currently uses the GTE CyberTrust Global Root and beginning on June 15th, 2013 will migrate to the Baltimore CyberTrust Root. The new root certificate uses a stronger key length and hashing algorithm which ensures we remain consistent with industry-wide security best practices. If your application does not accept certificates chained to both the GTE CyberTrust Global Root and the Baltimore CyberTrust Root, please take action prior to June 15th, 2013 to avoid certificate validation errors. While we seek to minimize the need for customers to take specific action based on changes we make to the Bing Maps platform, we believe this is an important security improvement.

    The Baltimore CyberTrust Root can be downloaded from https://cacert.omniroot.com/bc2025.crt <https://cacert.omniroot.com/bc2025.crt> . If you develop in Java you find guidance on importing the certificate into the keystore here <http://msdn.microsoft.com/en-us/library/dn135313.aspx> .

    The Bing Maps Team
    Microsoft Corporation



    • Edited by WildPacket Monday, May 13, 2013 5:45 PM
    Monday, May 13, 2013 5:44 PM

Answers

  • from what I understand is that I download the cert from here https://cacert.omniroot.com/bc2025.crt and install it on our bing map servers and that's it.  Can somebody please confirm  - much apprciated.
    Monday, May 13, 2013 6:33 PM
  • I would also recommend removing the old cert and making sure the code picks up the new one. From my personal experience with certs - if you have 2 of them side by side and the code filters them by the same property - you might get unwanted results.

    Hope that helps,

    Viktor Halitsyn

    Monday, May 13, 2013 6:39 PM

All replies

  • from what I understand is that I download the cert from here https://cacert.omniroot.com/bc2025.crt and install it on our bing map servers and that's it.  Can somebody please confirm  - much apprciated.
    Monday, May 13, 2013 6:33 PM
  • I would also recommend removing the old cert and making sure the code picks up the new one. From my personal experience with certs - if you have 2 of them side by side and the code filters them by the same property - you might get unwanted results.

    Hope that helps,

    Viktor Halitsyn

    Monday, May 13, 2013 6:39 PM
  • thanks viktor.  You mean I should remove my current ssl certificate and request a new one and apply that????
    Tuesday, May 14, 2013 12:33 PM
  • Correct.

    http://rbrundritt.wordpress.com

    Tuesday, May 14, 2013 2:03 PM
  • Hey,

    I am also using Bing Map on my PHP/JS based application. This SSL is not able to install on Apache. Can anybody suggest what to do for this???

    Thanks
    Monday, June 10, 2013 7:57 AM
  • Hello,

    can you please provide more context on what you're trying to do and what errors do you get?

    Thanks,


    Viktor Halitsyn

    Monday, June 10, 2013 5:31 PM