The IFS login page's change-password function fails in the browser with NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM, even though the installed SSL certificate isn't expired.

All FAQ questions / Security and access

Answer

This error means the certificate was signed using an outdated/weak hashing algorithm that modern browsers no longer accept, regardless of how far out its expiry date is — the fix is to have the certificate reissued (or replace it with a new one) using SHA-2/SHA-256 for the signing algorithm instead. Most certificate authorities support reissuing an existing certificate with a modern hash algorithm, often at no extra cost; once the reissued certificate is installed, the browser error goes away.

Documentation-based answer. Confirm the product and release before applying it. This answer has not been verified in an IFS environment.

← Browse Security and access questions