Do I need to update PayPal Payflow new certificate ?

I just received notice from PayPal that they are going to 2048-bit certificates for all API endpoints in our PayPal Sandbox and Payflow Pilot environments. I am not a Guru with this, but I can copy & paste a new cert. if I have to to my server.

This is the message I received…

[color=#008000]In keeping with industry standards set by the Certification Authority/Browser (CA/ B) Forum, PayPal will discontinue supporting 1024-bit key length certificates and will migrate to 2048-bit certificates before the end of 2013.[/color]

[color=#008000]We have completed the installation of 2048-bit certificates for all API endpoints in our PayPal Sandbox and Payflow Pilot environments, and we will be doing the same for our production environments starting on August 5, 2013. A complete upgrade schedule is available [/color][color=#008000]here[/color][color=#008000].[/color]

[color=#008000]We strongly encourage merchants to thoroughly test any existing integration(s) in the PayPal Sandbox and/or Payflow Pilot environments to ensure this migration will not cause any unforeseen issues.[/color]

[color=#008000]Please have the team or person responsible for your integration refer to the following:

If you need to import the new PayPal Sandbox and/or Payflow Pilot server certificates to your application or system truststore, you can download production and Sandbox certificates from [/color][url=“”][color=#008000][/color][/url][color=#008000].[/color]

[color=#008000]If you don’t typically import the server certificates to your truststore, you can proceed with testing with no other action required.[/color]

[color=#008000]If you have any questions, please contact PayPal Merchant Technical Services by filing a [/color][color=#008000]ticket[/color][color=#008000]; refer to PP-LIVE-3503. You may also visit our Live Site Status [/color][color=#008000]blog[/color][color=#008000].[/color]



I do use PP to process my payments.

Do I need to update any certificates on my server?

Any help is always appreciated.




I did receive the same emails from PayPal. And I interested to know if we do have to do any update on the PayPal scripts.

Thank you,


I am also using the PayPal Website Payments Pro and would like to know if I need to update anything.

Has anyone looked into this?

[size=2]CS-CART: Version: 2.2.5[/size]

I'm also using the PP Website Payments Pro, however, we use the API Signature and not the Certificate. I'm remember reading somewhere, that PP (or perhaps it was CS Cart?) prefer the use of the API Signature anyway.

Perhaps swap your authentication to API Signature and you won't have to worry about it?