In 2018 Lithium is moving all customer sites to SSL encryption (HTTPS) to safeguard customer data. HTTPS encrypts all data passed between the end user and your community. Lithium is ready to work with you to enable, test, and deploy a SSL certificate, to bring your community to full HTTPS delivery. We will also be sending out email notifications to our customers over the next month and a half as a reminder on this.
These changes will result in:
all pages/resources will be served over HTTPS in production
all pages/resources will be served over HTTPS in stage
requests for pages/resources/apis over HTTP will be redirected to their HTTPS equivalents
Note that the steps below follow Lithium Standard SSL deployment. Access to Standard SSL deployment is included with existing customer licenses (is free).
To get started, we ask that you follow the following steps.
Open a support ticket: Please open a support ticket via the case portal so that the support team can begin the process. If you have a technical resource on your side who can assist, please be sure to include them on the CC list when creating the case.
Certificate Procurement or Updates: If your community is not utilizing any form of SSL, Lithium Support will add your domain to the Lithium SAN SSL Certificate and prepare your community for HTTPS migration. If you already have SSL enabled but in partial mode, you’ll be transitioned over to full-site SSL.
Studio Review (Plugin Layer): Lithium Support will review your plugin and attempt to convert any hard-coded community HTTP paths to either use a relative path or HTTPS. More complicated asset updates will be flagged and communicated to your technical contact or may need a services engagement.
Community Admin Updates: While Support will handle the plugin transition, you will need to handle any hard-coded paths contained within the Community admin panel. This includes the announcement sections and custom content modules. If you had customization work done through Lithium Professional Services, you may have a Settings List Editor section in your admin that will also need to be updated if it contains any fields created for URL’s.
Review on Staging: Once the plugin updates are completed and the certificate procured/updated, you will need to test and review your staging instance. If there’s any problems, please inform support. If there are no problems, we’ll then move on to scheduling the changes for production:
Schedule your Production Deployment: Support will coordinate with you a production HTTPS deployment during a normal maintenance period.
FAQ - Frequently Asked Questions
Why is Lithium switching to HTTPS now?
Major browser and search vendors are making changes to flag pages that are delivered over HTTP as 'not secure' after July 2018. Obviously, this kind of message is not one you want associated with your brand. HTTPS is also a factor in search engine ranking. It's presumed that search vendors will add additional weight to HTTPS in their ranking formula this year.
What if part of my community is delivered over HTTPS already?
For customers using "mixed mode", Lithium will work with you to enable full site HTTPS using the existing SSL certificate. The steps required on your part are identical for customers using mixed mode.
Can I wait?
Not for much longer. Lithium is phasing out support for HTTP communities after 18.7, following best practices and maintaining our commitment to securing customer data.
Can I generate my own certificate?
Contact support or your account team for alternative SSL certificate scenarios. Note that alternative scenarios generally carry a charge and require an engagement (SOW). We typically advise against this direction.
What about external domains?
Anything hosted on the community will support HTTPS. However, any references to external domains will require that those domains be under SSL. If you’re using an external asset and the domain does not support HTTPS, we recommend that you upload the asset to your community via studio then update the reference code/URL.
What is a SAN SSL certificate?
See the What is the SAN SSL certificate? Article.
What are the benefits of using SSL (HTTPS encryption)?
See the Full HTTPS Encryption for all Communities article. Thank you for your time and we look forward to working with you to migrate you to HTTPS!
Lithium Support tracks a notification list to always keep you and your team up to date on news about our product as well as specifics for your particular environment.
These notification lists are used for:
Lithium Community and/or LSW upgrade notifications
Maintenance that falls outside of the standard maintenance windows
Miscellaneous product updates
For notifications of any system-wide availability updates, potential issues with critical third party services (such as Facebook or Twitter) that we learn about, or any other mass outage of our platform, please subscribe directly to status.lithium.com via email or SMS.
If you purchased the Gold or Platinum support package and have access to the Case Portal, you can view the contacts and emails we have on file for each of these lists here.
Please create a case or email us any time to update either notification list and ensure members of your team/organization are notified of important updates!
We've updated the status page to provide more specific and targeted information regarding the topics that you care about. This allows us to also be more proactive in order to provide the necessary details to you, our customers, about what is occurring on our servers, APIs, or functionality within the product lines. It is our goal to continue to improve this communication and we are happy to continue to receive feedback.
What's the URL?
What does this provide?
You'll receive an email or SMS about new investigations, monitoring, or resolutions as they occur based on your preferences and selections. It is the best way to be proactively notified about any problems across the Lithium product lines.
Who should sign up?
Anyone that's interested in keeping up to date about our infrastructure should be signed up. This includes administrators, community moderators, SMM supervisors, or even agents who are expected to respond to customers! It is always great to know what is going on with the tools being used and this is the place to get that information.
Won't I get spammed?
We update this page only for relevant information and you can select the subcategories to be notified about. By default, everything is checked but there may not be any need for you to be notified on a Community API if you're only using SMM in your business (even if we think you should use both!).