<html><body><div style="color:#000; background-color:#fff; font-family:arial, helvetica, sans-serif;font-size:12pt"><div><span>The 3 week propagation was taken from </span><a href="https://spaces.internet2.edu/display/InCCollaborate/Certificate+Migration">https://spaces.internet2.edu/display/InCCollaborate/Certificate+Migration</a></div><div><br></div><div>Specifically: <br></div><div><br></div><div><span class="Apple-style-span" style="color: rgb(51, 51, 51); font-family: Helvetica, Arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 17px; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); "><div style="font-size: 13px; line-height: 13pt; color: rgb(51, 51,
51); font-weight: normal; background-image: none; margin: 10px 0px; padding: 0px;">Since InCommon participants are strongly encouraged to update their metadata daily, you should wait at least a day for your new metadata to propagate. You may want to wait longer, however. <br></div><div style="font-size: 13px; line-height: 13pt; color: rgb(51, 51, 51); font-weight: normal; background-image: none; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: initial; margin-top: 10px; margin-right: 0px; margin-bottom: 10px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; background-position: initial initial; background-repeat: initial initial; ">>>We recommend you<span class="Apple-converted-space"> </span><b style="font-weight: bold; font-size: 12px; ">wait three (3) weeks for the metadata to propagate</b>, since any given Federation metadata file has an
explicit 3-week lifetime.</div><div style="font-size: 13px; line-height: 13pt; color: rgb(51, 51, 51); font-weight: normal; background-image: none; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: initial; margin-top: 10px; margin-right: 0px; margin-bottom: 10px; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; background-position: initial initial; background-repeat: initial initial; "><a name="CertificateMigration-implsupport"></a></div></span>I wanted to err on the side of caution. Other than that my plan looks sound?<br class="Apple-interchange-newline"></div><div><br></div><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt;"><div style="font-family: times new roman, new york, times, serif; font-size: 12pt;"><font size="2" face="Arial"><hr size="1"><b><span style="font-weight:bold;">From:</span></b> "Cantor, Scott"
<cantor.2@osu.edu><br><b><span style="font-weight: bold;">To:</span></b> "users@shibboleth.net" <users@shibboleth.net><br><b><span style="font-weight: bold;">Sent:</span></b> Thursday, October 20, 2011 10:00 AM<br><b><span style="font-weight: bold;">Subject:</span></b> Re: Cert rollover sanity check<br></font><br>
On 10/20/11 12:50 PM, "Mike Flynn" <<a ymailto="mailto:shibbolethlynda@yahoo.com" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<br><br>>My cert in InCommon is expired and as such I am looking to update<br>>it. I probably would never have noticed it was expired had I not tried<br>>to integrate with Ball State. They are using an AD FS based Idp and it<br>>balked at the expired cert.<br><br>Any IdP other than Shibboleth and probably simpleSAML.php is probably<br>going to require manual intervention, but it's very likely such IdPs won't<br>be using your key for anything but encryption anyway, so they could switch<br>once you install the new key.<br><br>>4. Wait 3 weeks for propogation:<br><br>Or a day?<br><br>-- Scott<br><br>--<br>To unsubscribe from this list send an email to <a ymailto="mailto:users-unsubscribe@shibboleth.net"
href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br><br><br></div></div></div></body></html>