FeatureSep 14, 2026

Root CA certificate rotation

Apigee API ManagementGCP · Hybrid and Multicloud

Root CA certificate rotation

Apigee hybrid v1.17.0 lets you rotate the root certificate authority (CA) certificate that anchors trust for TLS communication between your runtime components. You can now replace the root CA before it expires, without downtime.

For more information, see Rotate the root CA.

Read the original announcement

All Apigee API Management updates →

Fixed in this release
Bug ID Description 565072374 Fixed an issue where VerifyJWT policies using a JWKS uriRef could return steps.jwt.NoMatchingPublicKey on the first request after the 5-minute JWKS cache TTL expired when the identity provider rotated keys.
Apigee API ManagementFixOct 7, 2026
Bug ID · Description
Bug ID Description N/A Security fixes for apigee-asm-ingress. This addresses the following vulnerabilities: CVE-2026-33818
Apigee API Management

Root CA certificate rotation

More from Apigee API Management

Root CA certificate rotation

More from Apigee API Management