Monday, February 3, 2020

Microsoft Forgets to Renew Security Certificates

Have you seen this ad?


Microsoft Teams is collaboration software that allows groups of employees to work together remotely. To do so, team members must log in with usernames and passwords. How can employees be sure that they're logging into MS servers and not a hackers pretending to be Microsoft? This is done with digital certificates which authenticates sites that they are whom they claim to be. These certificates are issued by third party companies. But the certificates have expiration dates so that companies must prove that their sites are still active and correct. If a company doesn't renew the certificate in time, the third party cannot verify the site is legitimate, and access is denied.

This is what happened yesterday to Microsoft Teams. The Teams website's certificate expired and all users of MS Teams could not log in. Once the error was discovered, it takes time to rectify the problem. The Teams site was down yesterday from 9:00 am until nearly 4:30 pm. This was an embarrassing mistake for Microsoft to make for its flagship “Office hub” software, especially as the company started its own TV commercials for Teams recently. It’s also surprising to see Microsoft forget to renew a key certificate for Teams, especially when the company develops software like System Center Operations Manager to monitor for things like certificate expiration.

Credits:
https://www.theverge.com/2020/2/3/21120248/microsoft-teams-down-outage-certificate-issue-status


No comments:

Post a Comment