Important: Ubersmith Upgrade Required — Duo CA Bundle Expiration

Duo, a multifactor authentication (MFA) provider that Ubersmith supports, is replacing a bundled CA/root certificate that expires on February 2, 2026. After Duo’s enforcement date of March 31, 2026, older Duo clients, SDKs, and integrations that still include the expired certificate will fail to authenticate. Because our product includes support for Duo for MFA, you must upgrade to our latest release, 5.1.4, (which contains the updated Duo Web SDK) before the enforcement date.

Why this matters

Duo’s old CA/root certificate will no longer be valid after enforcement. Any software or integration, including Ubersmith, that uses the expired certificates will be unable to establish a secure connection to Duo’s services, which will break MFA for administrator logins that require Duo.

Key dates

• Feb 2, 2026 — Duo’s new CA bundle becomes available.
• Mar 31, 2026 — Duo enforces the new CA bundle; outdated clients may stop working after this date.

What Ubersmith has done

Our latest release, Ubersmith 5.1.4, includes the updated Duo Web SDK . That means once you upgrade to this release, your installations using our product will continue to work with Duo after the enforcement date.

What you must do

• Upgrade to our latest release (version 5.1.4) that includes the updated Duo Web SDK before March 31, 2026.
• Inventory any other Duo components you run (Authentication Proxy, mobile apps, plugins, custom integrations, etc.) and ensure they meet Duo’s minimum required versions listed in Duo’s advisory.
• Test Ubersmith administrator authentication after upgrading to confirm MFA works as expected.
• If you cannot upgrade immediately, implement temporary mitigations such as alternate authentication methods (TOTP or Authy, for example) to prevent user lockouts.

Need help?

If you’d like assistance with planning or performing your Ubersmith upgrade, contact our support team at support at ubersmith dot com and reference “Duo CA bundle upgrade — March 2026.”