From time to time, Workiva rotates our TLS certificates so anyone working in the Workiva platform has the most secure experience possible. Most networks are configured to automatically accept our most up-to-date TLS certificate. When this best practice is followed, users have a seamless experience without interruption when certificates are rotated.

While we discourage IT groups pinning to our TLS certificate fingerprint, some choose to do so. If your network configuration pins to the certificate fingerprint, once we rotate TLS certificates, it’s very likely you won’t be able to access the Workiva platform. Your IT group will need to point to the new certificate to get you back in. It’s all very technical, but our best practices are outlined in the IT network setup guide.

If you have trouble accessing the Workiva platform—for example, if you see a message that says something like: “This site can’t be reached” or “Can’t connect securely to this page”— it’s possible you need help from your IT group. Contact your IT team and let them know: