@lilim, it was related to the 18.7 platform upgrade (one of the reasons we push Lithosphere earlier in the cycle typically). We identified the bug and have also identified communities that would be impacted by it. For those that would be impacted, we'll be reviewing whether the issue is resolved before it rolls out to the communities in question or delaying/rescheduling the current upgrade date.
Our goal is to prevent this from impacting our customers as best as possible!
... View more
In 2018 Lithium is moving all customer sites to SSL encryption (HTTPS) to safeguard customer data. HTTPS encrypts all data passed between the end user and your community. Lithium is ready to work with you to enable, test, and deploy a SSL certificate, to bring your community to full HTTPS delivery. We will also be sending out email notifications to our customers over the next month and a half as a reminder on this.
These changes will result in:
all pages/resources will be served over HTTPS in production
all pages/resources will be served over HTTPS in stage
requests for pages/resources/apis over HTTP will be redirected to their HTTPS equivalents
Note that the steps below follow Lithium Standard SSL deployment. Access to Standard SSL deployment is included with existing customer licenses (is free).
To get started, we ask that you follow the following steps.
Open a support ticket: Please open a support ticket via the case portal so that the support team can begin the process. If you have a technical resource on your side who can assist, please be sure to include them on the CC list when creating the case.
Certificate Procurement or Updates: If your community is not utilizing any form of SSL, Lithium Support will add your domain to the Lithium SAN SSL Certificate and prepare your community for HTTPS migration. If you already have SSL enabled but in partial mode, you’ll be transitioned over to full-site SSL.
Studio Review (Plugin Layer): Lithium Support will review your plugin and attempt to convert any hard-coded community HTTP paths to either use a relative path or HTTPS. More complicated asset updates will be flagged and communicated to your technical contact or may need a services engagement..
Community Admin Updates: While Support will handle the plugin transition, you will need to handle any hard-coded paths contained within the Community admin panel. This includes the announcement sections and custom content modules. If you had a customization work done through Professional Services, you may have a Settings List Editor section in your admin that will also need to be updated if it contains any fields created for URL’s.
Review on Staging: Once the plugin updates are completed and the certificate procured/updated, you will need to test and review your staging instance. If there’s any problems, please inform support. If there’s no problems, we’ll then move on to scheduling the changes for production:
Schedule your Production Deployment: Support will coordinate with you a production HTTPS deployment during a normal maintenance period.
FAQ - Frequently Asked Questions
Why is Lithium switching to HTTPS now?
Major browser and search vendors are making changes to flag pages that are delivered over HTTP as 'not secure' after July 2018. Obviously, this kind of message is not one you want associated with your brand. HTTPS is also a factor in search engine ranking. It's presumed that search vendors will add additional weight to HTTPS in their ranking formula this year.
What if part of my community is delivered over HTTPS already?
For customers using "mixed mode", Lithium will work with you to enable full site HTTPS using the existing SSL certificate. The steps required on your part are identical for customers using mixed mode.
Can I wait?
Not for much longer. Lithium is phasing out support for HTTP communities after 18.7, following best practices and maintaining our commitment to securing customer data.
Can I generate my own certificate?
Contact support or your account team for alternative SSL certificate scenarios. Note that alternative scenarios generally carry a charge and require an engagement (SOW). We typically advise against this direction.
What about external domains?
Anything hosted on the community will support HTTPS. However, any references to external domains will require that those domains be under SSL. If you’re using an external asset and the domain does not support HTTPS, we recommend that you upload the asset to your community via studio then update the reference code/URL.
What is a SAN SSL certificate?
See the What is the SAN SSL certificate? Article.
What are the benefits of using SSL (HTTPS encryption)?
See the Full HTTPS Encryption for all Communities article. Thank you for your time and we look forward to working with you to migrate you to HTTPS!
... View more
We know that there are events that specific communities consider "major" for their business -- whether this is the Superbowl (top of mind at the moment!), Black Friday/Cyber Monday, a new product launch, a relaunch of your design, demo for executives or any one of a dozen other scenarios. It is our goal to work with you to ensure that these are as seamless as possible.
Lithium is committed to ensuring that you are supported 24/7/365 on any outages. We have a comprehensive guide to outages and information about our general status page available for you to take a look at, but the summary of this is that if you or your customer's are down or unable to work, let us know and we'll quickly take a look to see what's going on! You can always keep up to date on our status page where we do our best to provide insight to outages impacting multiple customers.
Assuming you know ahead of time that you have a major event coming up, please let us know as early as possible - at least a week is ideal! Although we have monitoring in place to help mitigate issues as best as possible, the best situation is where we can proactively review allocated resources, your server side setup, and make sure that there simply aren't any issues!
If you have a Technical Account Manager via Premium Support or CSM, please make sure that they (and support) are aware of your impending event so that they can pay attention to it. If you don't, don't despair! Open a support case letting our team know that you have an event coming, what the date and time of it is and that you'd like us to take a look to see if there's anything that needs to be done to help prevent an impact on you or your customers. If you can add Proactive to the case subject, it'll help us organize the solution as well.
The above applies to whether you're an SMM, Lithium Community or Lithium JX customer!
... View more