Scheduled Service Change - Duo Certificate Authority (CA) bundle expiration

<div>On Monday, February 2, 2026, Duo will replace their root certificate authority bundle, which will cause unsupported versions of their software to no longer receive Duo Push requests or be able to complete Duo Mobile-based verification. Additionally, any server-side integrations that are out of date and have the old certificate bundled will be unable to contact Duo’s API.<br><br>Duo users must update to supported versions of the app. They have been contacted by email and notified via IT News. System administrators with outdated instances must update all affected applications and clients that connect to Duo’s servers to the latest CA bundle version before February 2, 2026. Affected application owners have been contacted.<br><br>The versions listed below (and newer) include the new CA bundle:<br><br></div><ul><li>Duo Desktop</li><li>Linux: 4.3.0</li><li>macOS: 7.7.0.0</li><li>Windows: 7.7.0</li><li>Duo API Client Libraries</li><li>duo_api_csharp: 1.1.0</li><li>duo_api_golang: 0.2.0</li><li>duo_api_nodejs: 1.5.0</li><li>duo_api_perl: 1.4.0</li><li>duo_api_php: 1.2.0</li><li>duo_api_ruby: 1.5.0</li><li>duo_client_java: 0.7.1</li><li>duo_client_python: 5.5.0</li><li>libduo: 2.2.0</li><li>Duo Universal Web SDKs (software development kits)</li><li>duo_universal_csharp: 1.3.0</li><li>duo_universal_golang: 1.1.0</li><li>duo_universal_nodejs: 2.1.0</li><li>duo_universal_java: 1.3.1</li><li>duo_universal_python:&nbsp; 2.2.0</li><li>duo_universal_php: 1.1.0</li><li>All Other Affected Applications</li><li>Duo Access Gateway (DAG) - Linux: 2.1.1</li><li>Duo Access Gateway (DAG) - Windows: 2.1.1</li><li>Duo AD FS Adapter: 2.4.0</li><li>Duo Authentication for OWA: 2.2.0</li><li>Duo Authentication for RD Web: 3.1.0</li><li>Duo Authentication for Windows Logon: 5.1.1</li><li>Duo Authentication for macOS: 2.0.5</li><li>Duo Authentication Proxy - Linux: 6.5.1</li><li>Duo Authentication Proxy - Windows: 6.5.1</li><li>Duo Mobile: 4.85.0</li><li>Duo Network Gateway (DNG): 3.3.0</li><li>Duo OpenVPN: 2.6</li><li>Duo OpenVPN AS: 2.7</li><li>Duo for Oracle Access Manager (OAM): 2.1.0</li><li>Duo Universal WordPress: 1.2.0</li><li>Duo Unix: 2.1.0</li></ul><div><br>Failure to update affected applications will prevent customers from being able to log in to Cornell services.</div>