New EnTrust certs were released by Peraton and were supposed to be deployed to all MCU/LAS systems by 8/18/2023. The DOI USAccess team was just made aware of these new certificates today, 8/23/23 and have pushed through an emergency RFC to the new certificates to Active Directory just a few minutes ago. These will take time to replicate throughout the DOI.NET forest. DOI.NET AD joined machines (DCs, servers, and workstations) connected to internal network will get these new certs automatically in their Windows certificate stores.
If your site did not follow best practices and domain join your LAS or MCU system, you will need to manually install these certificates before processing anymore PIV certificate updates or activations. The new certs can be downloaded here and installed using the following instructions: USAccess Install New Entrust Certificates v1.1.1.pdf
