Applications Systems

DPA: Issues due to revoked code-signing certificates

We have made the decision to digitally re-sign DPA; the existing certificate is currently scheduled to be revoked on March 8, 2021. Installation of affected versions of DPA may be forbidden by system policy. This article describes steps to address the possible issues in DPA.

First published date

1/5/2021 5:17 PM

Last published date

2/23/2021 10:29 PM

Overview

As a best practice and to further enhance the security of our products, we have retained third-party cybersecurity experts to assist us in these matters. These experts are guiding us in improving our processes and controls.

To that end and to provide additional assurance to all of our customers, we have made the decision to digitally re-sign our products and have requested (and received) a new digital certificate. This reflects a recertification of the authenticity of SolarWinds products, both current and future.

What to expect next:

  • We will be issuing new product release for DPA containing the updated certificate.
  • The existing certificate is currently scheduled to be revoked on March 8, 2021.

If DPA users fail to upgrade to the newest version:

  • Existing users running an affected version will not encounter issues unless their security scanner software identifies the certificate used in the installation has since been revoked.
  • If users attempt to install or upgrade to an affected version on a Windows server, the operation is blocked and a message states that the installation is forbidden.

Note: DPA was not affected by the security issue that affected the Orion Platform. For more information, see the SolarWinds Security Advisory.

Affected DPA installation image versions that contain certificates to be revoked on March 8, 2021:

  • DPA 2020.2 (2020.2.690)
  • DPA 2020.2 HF2  (2020.2.690 HF2)
  • DPA 2020.2.1  (2020.2.731)
  • DPA 2020.4 RC 1 (DPA 2020.4.666)
  • DPA 2020.4 RC 2 (DPA 2020.4.699)
  • DPA 2020.4 RC 3 (DPA 2020.4.709)

Product section

Database Performance Analyzer

Cause

Revoked code-signing certificates.

Resolution

If DPA users are experiencing any of these issues, SolarWinds strongly recommends upgrading to the latest available version, which is available from the Customer Portal. See the DPA Installation and Upgrade Guide.

If you experience any issues during the upgrade, contact Support.

Installation and Upgrade Matrix

Current DPA VersionRecommended New Installation or Upgrade Version(s)Notes

No existing DPA server
  • DPA 2021.1 or later
  • DPA 2020.2.747
  • DPA 2019.4.1** (installation image downloaded after 1/5/2021)

Fresh installation

DPA server versions prior to 2019.4
  • DPA 2021.1 or later
  • DPA 2020.2.747
  • DPA 2019.4.1** (installation image downloaded after 1/5/2021)

See the DPA Installation Guide for version upgrade compatibility.

  • DPA 2019.4
  • DPA 2019.4 HF1
  • DPA 2021.1 or later
  • DPA 2020.2.747
  • DPA 2019.4.1** (installation image downloaded after 1/5/2021)

 

  • DPA 2019.4.1058 (installation image downloaded before 1/5/2021)
  • DPA 2021.1 or later
  • DPA 2020.2.747

Note: You cannot upgrade the original 2019.4.1058 to an installation image of 2019.4.1058 downloaded after 1/5/2021.

  • DPA 2020.2
  • DPA 2020.2 HF2
  • DPA 2020.2.1
  • DPA 2021.1 or later
  • DPA 2020.2.747

 

DPA 2020.4 RC 1, 2, or 3

DPA 2021.1 or later

 

** The installed version number is DPA 2019.4.1058, but the Customer Portal displays the version number as DPA 2019.4.1.The installation image for this version must be downloaded after 1/5/2021. However, for images downloaded after 1/5/2021, the timestamp in the Customer Portal is still 01 APR 2020 because the embedded certificate was replaced but the build did not change.