If you administer your organization’s Exchange Network Node, please be advised that U.S. EPA’s Central Data Exchange is making two changes to several Exchange Network services during the week of February 16. The CDX team anticipates that most EN partners will not be impacted by these changes, but please see the details below to determine if your agency’s Node may be affected.
Change 1: Updated Security Certificates
Starting the week of February 16, 2026, certificates offered by CDX will begin the transition to an alternate Certificate Chain:
- Intermediate certificate: Sectigo RSA Domain Validation Secure Server CA
- Root certificate: USERTrust RSA Certification Authority (Friendly Name: Sectigo)
After this change, organizations that use default certificate stores without certificate pinning will not notice any difference in communication or behavior for CDX or applications that interact with CDX except that the new certificate authority will be present when inspecting site security. Most or all CDX partners and users will fall into this category; for those users, no action is needed.
Any organizations that use certificate pinning should be able to download the new root and intermediate certificate bundle from the links above ahead of this change. We expect that this change will complete before March 11, 2026. For best compatibility, it is recommended that organizations use both the new and existing certificate chains until that date.
Change 2: Updated IP Addresses
U.S. EPA will also be making a change to the IP address for several services run by EPA’s Central Data Exchange (CDX). This change will impact the following hostnames on February 20:
cdx.epa.gov
cdxnodenaas.epa.gov
cdxnodengn.epa.gov
cdxtools.epa.gov
encromerr.epa.gov
ves.epa.gov
cdxapi.epa.gov
cdxnode2.epa.gov
ends2.epa.gov
enservices.epa.gov
The new IP address for these services will be 204.47.253.8. EPA expects this change to be transparent to all users except for organizations who use firewall rules to restrict outbound traffic in server environments. Administrators in those environments should be aware that firewall rules will need to be implemented at the nearest opportunity allowing the new IP address (204.47.253.8) to avoid service disruptions.
For more information or answers to questions, please contact the Exchange Network Help Desk at 1-(888)-890-1995 or [email protected].