Orderful AS2 Certificate Rotation
How Orderful rotates its own AS2 certificate, what arrives in the rotation email, and how to switch over at your own pace.
Orderful's AS2 certificate is the one Orderful generates and controls. Your AS2 software uses it to verify Orderful's signature on inbound messages and to encrypt the messages you send to Orderful. Like any certificate, it expires, so Orderful replaces it periodically.
This page covers that certificate only. Your own AS2 certificate and a trading partner's are rotated by whoever owns them — see Connecting to Orderful via AS2.
When a rotation starts
Orderful starts a rotation automatically 35 days before the current certificate expires.
When it does, Orderful emails you, and the new certificate is included in that email, so you can install it without signing in.
You can also download it from the Communication Channel at any time while a rotation is underway:
- Sign in to your Orderful account:
- Orderful US: https://ui.orderful.com
- Orderful EU: https://ui-eu.orderful.com
- From the left navigation menu, click on Communication Channels.
- Select your AS2 Communication Channel by clicking on its row. This opens a side panel.
- The new certificate appears alongside the current one. Click either to download it.
Each certificate on the side panel lists its Serial Number, SHA-1 and SHA-256 fingerprints, so you can confirm the one you installed matches.
Switching over
There is no fixed cutover date. You switch when you're ready:
- Add the new certificate to your AS2 software alongside the current one. Don't remove the current one yet.
- Begin using the new certificate in both directions — for the messages you send to Orderful and the messages you receive from Orderful.
- Once Orderful has seen the new certificate used successfully in both directions, the switch is complete and the old certificate is retired.
While only one direction has moved across, Orderful sends and receives on both certificates. Your traffic keeps flowing throughout, so the two directions don't have to change at the same moment.
If you don't switch in time
On the old certificate's expiry date, Orderful switches to the new certificate automatically, so an expired certificate is never used.
If your AS2 software is still using the old certificate when that happens, deliveries fail in both directions until you install the new one — typically reported as an
integrity-check-failedordecryption-failedMDN error. See AS2 Troubleshooting.
Related
Updated about 1 hour ago