Migration to new WAF July 2020

Due to migration of services to a new web application firewall (WAF) provider the server certificates for the following vixverify.com and clientcert.vixverify.com hostnames are being updated.

Test hostnames effected:
test-au.vixverify.com
test-au-fip.vixverify.com
test-au.clientcert.vixverify.com
test-au-fip.clientcert.vixverify.com
simpleui-test-au.vixverify.com

Production hostnames effected:
au.vixverify.com
au-fip.vixverify.com
au.clientcert.vixverify.com
au-fip.clientcert.vixverify.com
simpleui-au.vixverify.com
za.vixverify.com
za-fip.vixverify.com
za.clientcert.vixverify.com
za-fip.clientcert.vixverify.com
simpleui-za.vixverify.com

On the 13th July after midday we will be updating the server SSL certificates used for all web access on the test hostnames.

On the 3rd Aug after midday we will be updating the server SSL certificates used for all web access on the production hostnames.

There are two certificate bundles: one for the vixverify.com hostnames:

and one for the clientcert.vixverify.com hostnames:

In each of these you will also find a copy of the issuing certificate chain. It is likely that you will not need to do anything to accept the new certificates and we only provide them in case your system has manually maintained certificate trust stores.

In addition to the SSL changes the fixed IP address hostnames (i.e. the hostnames that contain the "-fip" identifier) will need to have the following IP addresses added to the list of possible IP addresses allocated to these hostnames:

45.60.37.224/32
45.60.39.224/32
45.60.31.224/32
45.60.33.224/32
45.60.35.224/32
45.60.103.224/32
45.60.38.4/32
45.60.40.4/32
45.60.32.4/32
45.60.34.4/32
45.60.36.4/32
45.60.104.4/32

The full IP address list for the fixed IP hostnames can be found in the file:

The addition of these IP addresses need to be timed to match the certificate changes mentioned above, i.e. 13th July in test and 3rd Aug in production.

If you have any questions please contact greenid.support@gbgplc.com.