Authentifizierung (RWTH Single Sign-On, MFA)

In connection with today's maintenance, there were two interruptions to the RWTH Single Sign-On during the specified time period.

The current signing and encryption certificate for the Shibboleth Identity Provider expires in June. To ensure uninterrupted service, a new certificate has been installed on the IdP. The rollover will take place in stages: The new certificate will initially be active alongside the old one (dual-key operation), allowing service providers to update their metadata before the old certificate is deactivated.

As of today, 9:30 AM, the new certificate is active in the metadata. If you experience issues with your service provider, please reload the metadata once:

https://sso.rwth-aachen.de/metadata/rwth.metadata.xml
On 26 June 2026 at 09:30 AM, the metadata signature will be updated. The new certificate for verifying this signature is available immediately at:

https://sso.rwth-aachen.de/metadata/sso_2026.pem

The signature of the metadata file at https://sso.rwth-aachen.de/metadata/rwth.metadata.xml has been updated today and can be verified using https://sso.rwth-aachen.de/metadata/sso_2026.pem and https://sso.rwth-aachen.de/metadata/sso.pem.
If you are running a standard Shibboleth Service Provider 3, the certificate used to verify the metadata signature is configured in shibboleth2.xml under the XML tag .

To resolve the current issues, maintenance work will be performed today between 4:30 p.m. and 5:30 p.m. During this time, there will be a service interruption affecting most of the services at RWTH for approximately 10 minutes. Please take this last-minute announcement into account when planning your work.

The work has been completed, and the issue has been successfully resolved.

Even though most of the services are up and running again, the root cause of the problem has not been resolved. We are continuing to work behind the scenes to fix the issue. However, this also means that disruptions may still occur.

The work has been completed, and the issue has been successfully resolved.

Login via RWTH Single Sign-On (SSO) is currently disrupted. As a result, it is not possible to log in to any connected services.

There is currently a widespread disruption affecting, among other things, the SSO, though not limited to it. The root cause analysis is still underway.

Most of the services are currently up and running again. The analysis is ongoing. We cannot rule out the possibility of further outages.

Most of the services are up and running again. Please note, however, that the underlying issue has not yet been resolved, and disruptions may therefore continue to occur.

Explanation Following the Outage:
On June 22, 2026, starting at 9:00 a.m., there was a widespread outage affecting our services, which primarily impacted the RWTH Single Sign-On but was not limited to it. By around 12:00 p.m., the situation had largely stabilized, allowing users to log in via RWTH Single Sign-On again; however, other issues (e.g., with the IT Center ticket tool and RWTHmoodle) persisted. On the same day, between 4:30 p.m. and 5:00 p.m., the data center firewall was rebooted, which resolved the remaining issues. The disruption was caused by problems with the data center core switch. To ensure a lasting improvement in the situation, maintenance on the affected system was successfully carried out on June 30, 2026.

There may currently be issues logging in via RWTH Single Sign-On (SSO).
This is because a new certificate has been active in the metadata since 9:30 a.m. today.
The relevant department has been notified and is working with the system operators to resolve the issue.

During the specified time period, due to legal requirements regarding the affiliation status of various user groups within the university, the eduPersonAffiliation is being updated for some user groups. This will affect services connected to the SSO, as more or fewer users (depending on the service’s authorization policy) may gain access.
The change is based on the affiliations recommended by IDM.nrw for these user groups.

During the specified period maintenance work will be carried out on the IT Center's MFA MySQL databases. The databases will be unavailable for a total of approximately 15 minutes during this maintenance and new logins to services with RWTH Single Sign-On will not be possible. Existing sessions will remain intact.

Maintenance is complete

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts

If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

Today at 2:00 PM, we will be performing maintenance on the RWTH Single Sign-On service. The service may be temporarily unavailable during this time. Once maintenance is complete, you may need to log in again.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

Im angegebenen Zeitfenster werden die beiden redundanten Datacenter Core-Router gegen leistungsfähigere Router ersetzt. Da der Austausch wechselseitig erfolgen kann, ist dieser unterbrechungsfrei geplant.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

The SSO login page will undergo minor changes due to necessary technical updates.It is assumed that there will be no failures.

Maintenance work will be performed on the MySQL database servers for the Multi-Factor Authentication (MFA) service during the specified time period.

As a result, MFA will be unavailable between 7:00 a.m. and approximately 7:20 a.m. During this period, new logins to the VPN and services using RWTH Single Sign-On will not be possible; existing sessions will remain active.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts

If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

Due to the replacement of central switches in the data center at the Seffenter Weg and Wendlingweg locations, there may be brief outages of the services operated in the data center between 4 p.m. and 7 p.m., or 10 p.m. at the latest.

As a result, authentication for Wi-Fi and VPN will also be temporarily unavailable, meaning that logging into Wi-Fi (eduroam, RWTH institutes, RWTH devices) and all VPN areas may be temporarily disrupted.

The maintenance will also affect various IT Center services, which may also experience brief outages. This message has been extended to the affected services.

Die Wartung wurde erfolgreich beendet.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts

If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

During the specified period maintenance work will be carried out on the IT Center's MFA MySQL databases. The databases will be unavailable for a total of approximately 15 minutes during this maintenance and new logins to services with RWTH Single Sign-On will not be possible. Existing sessions will remain intact.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts

If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

Technical issues may result in the error message ‘Service unavailable’ appearing.

The RWTH Single Sign-On is currently experiencing partial disruption.

We are aware of the partial disruption and are already working on a solution.

Unfortunately, the second factor, “email,” is currently not working, and when you select the token, you will receive the following error message:

“Authentication failed! None of the selected tokens are available.”

Our technical department is aware of the issue and is already working on a solution.

In the meantime, please use other token types to authenticate yourself with RWTH Single SignOn.

Currently, access via RWTH Single Sign-On is not possible for the some services, e.g.:

• Microsoft tenant for students
• MailAdM
• MoveOn
• Chat support
• RWTHmoodle

The problem has been identified and will be fixed shortly.

RWTHmoodle is accessible again.

MailAdm is available now

MoveOn login works again

Access to the aforementioned systems has been restored. Other services may still be affected at this time.

The configuration deployment finished today at 05:07 pm.

The configuration deployment planned for today has been postponed until tomorrow afternoon.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts

If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

Currently, logging in to Zoom via RWTH Single Sign-On is not working. A solution is currently under development.

Logging in to Zoom is working again.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts

If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

During the specified period maintenance work will be carried out on the IT Center's MFA MySQL databases. The databases will be unavailable for a total of approximately 15 minutes during this maintenance and new logins to services with RWTH Single Sign-On will not be possible. Existing sessions will remain intact.

Die Wartung ist beendet.

The transfer of large amounts of data at the end of the semester is currently putting a strain on the system. This may result in the following effects:
- Delayed response times when using Selfservice, ConnectMe, and PasswordReset
- Delay in creating Tokens for Multi-factor authentication (MFA)
- Delays when creating new accounts and updating personal data, especially when redeeming ConnectMe coupons
- Delays in assigning permissions and roles
Changes made and data will not be lost, but may be processed more slowly and displayed correctly at a later stage.
Please be patient and refer to our current status messages for new information.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

Due to an unintentional configuration error, a data protection incident occurred on Monday, 11 August 2025, between 11:36 and 11:58 a.m. (or, in the context of RWTHmoodle, until approximately 12:40 p.m.):
Logged-in users may have been able to view the data of other logged-in users.
The following services are affected (analysis is ongoing):
- RWTHmoodle
- Git-Ce
- RWTHgpt
- Sciebo (only data in MySciebo)
- GigaMove
Affected persons will be informed separately by email.
If you have any questions, please contact our IT Service Desk (servicedesk@itc.rwth-aachen.de).

The analysis has already been completed for most of the affected services. The affected users have been identified and informed by us. Once the analysis has been finalised, we will provide another update here.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

During the specified period maintenance work will be carried out on the IT Center's MFA MySQL databases. The databases will be unavailable for a total of approximately 15 minutes during this maintenance and new logins to services with RWTH Single Sign-On will not be possible. Existing sessions will remain intact.

RWTH Single Sign-On login ist not possible at the moment.
Existing sessions are not affected.
We are working on fixing the problem.

The problem has been solved.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

There were disruptions to RWTH Single Sign-On in some cases during the specified period . After entering your login details, the screen loads and then an Internal Server Error appears. This affects all services that use the RWTH Single Sign-On login.

Maintenance work will be carried out on the IT Center's MySQL database servers during the specified period. The MySQL databases hosted by the IT Center will be unavailable for a total of approx. 15 minutes during this maintenance.
This also affects dependent services of the IT Center that use these MySQL databases, i.e. multi-factor authentication (MFA) and Icinga
Due to the great importance of multi-factor authentication (MFA) for the work processes at RWTH, the work on the MFA-related databases is carried out directly at the start of maintenance. Accordingly, MFA will not be available between 7:00 and probably 7:20 am. During this period, new logins to services with RWTH Single Sign-On are not possible. Existing sessions will be preserved.

Die Wartung ist beendet.

There are currently disruptions to RWTH Single Sign-On. After entering your login details, the screen loads and then an Internal Server Error appears. This affects all services that use the RWTH Single Sign-On login.
The specialist department has been informed and is working to resolve the issue.

The problem has been fixed.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

During this period, the routing of the previous XWiN routers (Nexus 7700) will be switched to the new XWiN routers (Catalyst 9600). These routers are essential for RWTH's network connection. This changeover also requires the migration of the DFN connection, which is switched redundantly to Frankfurt and Hannover, and the RWTH firewall to the new systems.
There will be complete or partial outages of the external connection during the maintenance window. All RWTH services (e.g. VPN, email, RWTHonline, RWTHmoodle) will not be available during this period. The accessibility of services within the RWTH network will be temporarily unavailable due to limited DNS functionality.

Der Uplink nach Frankfurt wurde erfolgreich auf das neue System geschwenkt.

Umbau des Uplinks nach Hannover beginnt.

Uplink nach Hannover auf das neue System umgezogen.

BGP v4/v6 nach Frankfurt und Hannover sind nun über die neue Routern funktional.

Es stehen noch ein paar kleinere Nacharbeiten an.

Wartung ist abgeschlossen. Der Datenverkehr läuft nun vollständig über die neuen Router!

Problematik mit der Anbindung zur Physik identifiziert, Lösung erfolgt morgen früh.

There is currently a problem with the RWTH Single Sign-On login. New logins are not possible.

The problem has been solved.

Zurzeit ist es nicht möglich, einen Einmal Sicherheitscode über den E-Mail-Token zu generieren.
Die zuständige Stelle ist informiert und arbeitet bereits an der Lösung.
Bitte verwenden Sie zur Authentifizierung einen anderen Token.
---English version---

The problem has been solved.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

In der angegebenen Zeit findet ein Update unseres MFA-Backends statt. Während dieser Zeit können neue RWTH Single Sign-On Sitzungen mit MFA nicht gestartet werden. Weiterhin sind neue VPN-Sessions nicht möglich. Bestehende Sitzungen (SSO & VPN) bleiben unbeeinträchtigt aktiv.
Aufgrund von fehlenden Policies konnten nicht alle Token gefunden werden und es kam zu Problem bei der Anmeldung.

Bitte beachten Sie, dass der RWTH Single Sign-On (SSO) während der oben genannten Zeit aufgrund geplanter Wartungsarbeiten für wenige Sekunden nicht verfügbar sein wird.
Betroffene Dienste: Alle Anwendungen, die den SSO verwenden.
Auswirkungen: Es können keine neuen Sitzungen gestartet werden und bestehende Sitzungen sind nicht nutzbar. Nutzerinnen und Nutzer in bereits geöffneten Anwendungen können jedoch bis zu ihrem Logout normal weiterarbeiten.
Während der Wartung sehen Sie eine entsprechende Wartungsseite.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

There are currently sporadic failures of the RWTH Single Sign-On and the MFA.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

After the necessary preparatory work (replacement of the SFPs), the operating system relevant to the appliance can now be updated. No interruption of services is to be expected due to the redundancy/HA setup.

Maintenance work will be carried out on the IT Center's MySQL database servers network during the specified period. The MySQL databases hosted by the IT Center will be unavailable for a total of approx. 20 minutes during this maintenance.
This also affects dependent services of the IT Center that use these MySQL databases, i.e. MFA, Icinga, Hiwi Portal among others.
During maintenance, new logins to the VPN and to services with RWTH Single Sign-On are temporarily not possible. If you are already logged in, these sessions will remain active during maintenance. We kindly ask you to take this into account in your work processes.

Die Wartung ist beendet.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

must be postponed/repeated due to problems

neuer Versuch
nre try

After yesterday's hardware work, combined with a software upgrade, the software used still needs to be adapted today
The work on the standby system alone should not lead to any interruption of services.

As parts of the hardware currently in use led to massive malfunctions during a software upgrade of the appliance itself some time ago, alternative/new components will be tested on the inactive system during this appointment.
Working on the standby system alone should not result in any interruption of services.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

This evening around 20:25 - 21:00 there was a performance low in the SSO service and was checked by the specialist department during this time. The problem has been solved and fast logins without waiting times are possible again.

There may currently be problems with the single sign-on login. We are already working on a solution.

Maintenance work will be carried out on the IT Center's MySQL database servers during the specified period. The MySQL databases hosted by the IT Center will be unavailable for a total of approx. 15 minutes during this maintenance.
This also affects dependent services of the IT Center that use these MySQL databases, i.e. MFA, Icinga, Hiwi Portal among others.
Due to the great importance of multi-factor authentication (MFA) for the work processes of the RWTH, the work on the MFA-related databases will be carried out directly at the beginning of the maintenance. Accordingly, MFA will probably not be available between 7:00 and 7:20 am. During this period, new logins to the VPN and to services with RWTH Single Sign-On are not possible. If you are already logged in, these sessions will remain active during maintenance. We kindly ask you to take this into account in your work processes.

Die Wartung ist beendet.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

During the specified period, maintenance work will be carried out on some of the IT Center's MySQL database servers. The MySQL databases hosted on these servers will be unavailable for a short time during this maintenance.
This also affects dependent services of the IT Center that use these MySQL databases, i.e. MFA, Icinga and Hiwi Portal.
Due to the high importance of multifactor authentication (MFA) for the work processes of the RWTH, we would like to point out that MFA will not be available for a short time between 07:00 and probably 07:10. During this period new logins to services with RWTH Single Sign-On are not possible.

At the moment, single sign-on and multi-factor authentication are sporadically disrupted. We are already working on a solution and ask for your patience.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

For a short period of time (approx. two minutes) today, login via the RWTH Single Sign-On and thus access to the connected services was disrupted.

Due to problems with the load balancers (F5), the majority of services such as RWTHmoodle, RWTH Single Sign-On, RWTH E-Mail etc. and all services behind the RWTH Single Sign-On are disrupted.

A technician from the manufacturer has now also been called in to solve the problem.

The fault has been rectified. However, there may still be delays in delivery or receipt.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

Due to database maintenance, login to applications protected by RWTH Single Sign-On (e.g. RWTHonline, RWTHmoodle, Selfservice, SAP) will not be possible for a short time during the specified period.
Please log in to the application in which you would like to work during this period before the maintenance.
We assume that the interruption of the login will last about five minutes.

Maintenance work will be carried out on the IT Center's MySQL database servers during the specified period. The MySQL databases hosted by the IT Center will be unavailable for a total of approx. 15 minutes during this maintenance.
This also affects dependent services of the IT Center that use these MySQL databases, i.e. MFA, SeviRe, Mailadm, Gigamove, Jards, RWTHblog, among others.
Due to the great importance of multi-factor authentication (MFA) for the work processes at RWTH, the work on the MFA-related databases is carried out directly at the start of maintenance. Accordingly, MFA will not be available between 7:00 and probably 7:20 am. During this period, new logins to services with RWTH Single Sign-On are not possible.

Die Wartung ist beendet.

For a short period of time, there was an error while using RWTH Single Sign-On.
The problem has been solved.

In the course of a software update, the individual proxies are restarted. Due to the HA implementation, there should be no failures. Affected are among others mail, WLAN VPN/Shibboleth (because of LDAP).

Im angegebenen Zeitraum werden Wartungsarbeiten an den MySQL-Datenbankservern des IT Centers durchgeführt. Einige der vom IT Center gehosteten MySQL Datenbanken werden während dieser Wartung für insgesamt ca. 15 Minuten nicht zur Verfügung stehen.
Betroffen davon sind auch abhängige Services des IT Centers, welche diese MySQL Datenbanken verwenden, d.h. unter anderem Hiwi Portal und MFA.

Die Wartung ist beendet.

Due to the expired certificate for idm.rwth-aachen.de, no IdM applications and the applications that use RWTH Single Sign-On can be accessed.
We are working on a solution.
- An insecure connection message is displayed when calling up IdM applications.
- When calling up applications with access via RWTH Single Sign-On, a message about missing authorisations is displayed.

The certificate has been updated and the applications can be accessed again. Please delete the browser cache before accessing the pages again.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

Aufgrund einer Wartung wird MFA im angegebenen Zeitraum nicht zur Verfügung stehen. Bestehende Browser Sessions sind von der Wartung nicht betroffen.

The announced maintenance on 12.09.2024 from 7 a.m. to 8 a.m. will not be carried out. A new date will be arranged.

At this time, changes are made to a central component of the IdM system. During maintenance, the IdM services will not be available for a short time. If you receive an error message, please try the desired process again.

Due to DNS disruption, the name servers of various providers are currently not returning an IP address for hosts under *.rwth-aachen.de.
As a workaround, you can store alternative DNS servers in your connection settings, e.g. the Level3-Nameserver (4.2.2.2 and 4.2.2.1) or Comodo (8.26.56.26 und 8.20.247.20). It may also be possible to reach the RWTH VPN server, in which case please use VPN.

Instructions for configuring an alternative DNS server under Windows can be found via the following links:
https:
www.ionos.de/digitalguide/server/konfiguration/windows-11-dns-aendern/
https:
www.netzwelt.de/galerie/25894-dns-einstellungen-windows-10-11-aendern.html
You can also use VPN as an alternative. If you cannot reach the VPN server, you can adjust the host file under Windows according to the following instructions. This will allow you to reach the server vpn.rwth-aachen.de. To do this, the following entry must be added:
134.130.5.231 vpn.rwth-aachen.de
https:
www.windows-faq.de/2022/10/04/windows-11-hosts-datei-bearbeiten/

The hosts of RWTH Aachen University can now be reached again from outside the RWTH network.

Individual users may have experienced problems even after the fault was rectified on 25 August at 9 pm. On 26.8. at 9 a.m. all follow-up work was completed, so there should be no further problems.

In der angegebenen Zeit findet eine Wartung am RWTH Single Sign-On statt. Es wird mit keiner Dienstunterbrechung oder -störung gerechnet. Bitte versuchen Sie im Falle einer Fehlermeldung den Login erneut.

During this period, the system undergoes regular maintenance. From the user's perspective, the following short-term effects may occur temporarily during the maintenance period:
- Limited functionality and availability of SelfService, ConnectMe and PasswordReset
- Delays when creating new accounts and updating personal data
- Delays in the assignment of authorizations and roles
- Interference with new Shibboleth logins
- Limited functionality and availability of RWTHcontacts, RWTH directory of people, RWTH directory of organizations, and UKAcontacts
If a login via Shibboleth (RWTH Single Sign-On) fails during maintenance, we ask users to repeat the login attempt. Existing Shibboleth sessions are not affected by the maintenance.

In der angegebenen Zeit findet eine Wartung am RWTH Single Sign-On statt. Es wird mit keiner Dienstunterbrechung oder -störung gerechnet. Bitte versuchen Sie im Falle einer Fehlermeldung den Login erneut.

Die Wartung muss leider verlängert werden. Es ist weiterhin mit keinen Einschränkungen zu rechnen.

Derzeit gibt es eine Störung bei der Anmeldungen über das RWTH Single Sign-On. An der Behebung wird gearbeitet.

Die Störung ist behoben.

Aufgrund von Erneuerung der SSL Zertifikate wird der vCenter Server im genannten Zeitraum teilweise kurzzeitig nicht erreichbar sein.
Alle VMs laufen wie gewohnt weiter und die Erreichbarkeit der darauf laufenden Dienste wird NICHT durch diese Wartung beeinträchtigt werden. Lediglich die Funktionen des HTML5 Clients für das Management ihrer VMs werden nicht verfügbar sein, da Sie sich während der Wartung nicht am vCenter Server einloggen können.

Während der Wartung ist es zu Fehlern gekommen, sodass die Wartung verlängert werden muss.

---englisch version below---
Due to maintenance, some servers are currently unavailable.
There are temporary connection problems with some services.