October 11, 2026

APEX Update — Action Required — Add New Firewall Rules

APEX Firewall Configuration Changes

CeRTNA is migrating APEX network endpoints to new hostnames under the certna.ca.gov domain.

Key dates:

By October 11, 2026 — add the new certna.ca.gov firewall rules below. Keep the existing certna.org rules in place; do not remove them yet.

October 31, 2026 — the legacy certna.org endpoints are fully decommissioned. Only on or after this date should the old rules be removed.

Full firewall documentation: Firewall & Network Settings. Contact Greg Dapkus (greg.dapkus@certnaca.gov) for SharePoint access.

What's Changing — Firewall Rules

New Whitelist Addresses:

All ERDS workstations should have these additional addresses allowed for outbound traffic.  If your G2G workstation is also restricted, these should be applied to that workstation as well. 

Hostname IP Address:Port Description
apex-setup.certna.ca.gov 104.42.220.68:443
20.59.104.73:443		 APEX installation & updates
apex-erds.certna.ca.gov ERDS - APEX Service (ERDS only)
apex-reports.certna.ca.gov ERDS - APEX Reports (ERDS only)
apex-g2g.certna.ca.gov G2G - APEX Service (G2G only)
apex-g2g-reports.certna.ca.gov G2G - APEX Reports (G2G only)
apex-chk.certna.ca.gov APEX Internet Health Check

What's Changing — Platform Login

A new APEX client will be released on September 13, 2026, adding new Platform login options ERDS (.gov) and G2G (.gov) for connecting to ERDS and G2G over the new certna.ca.gov endpoints listed above.

These new platform options will only work once the firewall rules above have been updated. After the client uppdate, select ERDS (.gov) or G2G (.gov) from the Platform dropdown at login. The existing Production-ERDS and Production-G2G options will continue to be available during this transition period.

What You Need To Do

  • Before 10/11/2026: Add the new certna.ca.gov hostnames (or a broader wildcard *.certna.ca.gov) to your firewall/proxy allow list. All legacy *.certna.org rules should remain active during this window to avoid disrupting service.
  • By 10/11/2026: After the firewall rules have been added, update your login to use the .gov platform.
  • On or after 10/31/2026: remove the retired *.certna.org rules.  Another email will be sent with more details on what to remove and what your final firewall rules should look like in October.

What's Changing — API Endpoint Update

If your organization integrates directly with the APEX API (not required for standard client workstations), the service URL is changing:

·         Current: https://apex-prd.certna.org/APEX/Service/APEXPublicServer.svc

·         New: https://api-erds.certna.ca.gov/APEXPublicServer.svc

Both URLs will remain active during the transition. Update your integrating service(s) to the new URL by October 10, 2026; the old endpoint will be completely retired on October 31, 2026. API documentation: DEV API Integrations.  Contact Greg Dapkus (greg.dapkus@certnaca.gov) for SharePoint access.

Questions or Support

If you have any questions or concerns, please contact  our Technical Director, Greg Dapkus greg.dapkus@CeRTNAca.gov

If you need immediate assistance, please call 657-216-1400.