On Wednesday, 01.04.2026, between 8:30 PM and 10:30 PM, it was not possible to establish a connection to the eduroam WLAN via easyroam. Logging into the eduroam WLAN was either not possible or only sporadically during this time.

Trouble caused by: Failure of the required DFN infrastructure

The DFN Association (Association for the Promotion of a German Research Network) has informed us that the eduroam service (Easyroam) is currently experiencing disruptions.

Network connections via eduroam cannot be established reliably at this time.

The DFN is working on a solution; no further information is available at this time.

Trouble caused by: Unknown

On Thursday, 09.04.2026, from 08:00 am to 09:00 am, maintenance work will be carried out on the central PostgreSQL database service.

During this time, all existing connections to the database service and subsequently to connected IT services will be disconnected once.
The database itself will be accessible again after a short time (expected to be less than 1 minute).

It is recommended to terminate services and connections beforehand to avoid data loss.

Affected services include, but are not limited to:

- XWiki (https://xwiki.desy.de)
- DESY Chat (https://chat.desy.de)
- SYMPA Mailing Lists (https://lists.desy.de)
- EduVPN
- Central Login Service (Keycloak)
- Puppet

A complete list of affected services can be found on the following webpage:
https://ias-intern.desy.de/pls/r/apexkc/pgservices/home
(accessible only from the intranet)

Maintenance caused by: Applying updates

more information about this entry

On the second Friday of every month, the monthly Windows updates are released. Please install them on your DESY Windows devices as soon as possible to ensure that they are up-to-date and secure.

To do this, connect your Windows device to the internal DESY network after the updates have been released. Use VPN if you are extern. When prompted or at the end of the day, restart or shut down your Windows device.

Seven days after the release of the updates, a forced restart of the computers will take place if this has not taken place in the meantime.


Hint:
On Wednesday which follows the release of the updates from 17:00 to max. 20:00, trouble-free working in the Windows environment cannot be guaranteed due to the monthly maintenance work on the central Windows servers.

It is recommended to log off or shut down DESY Windows devices on Wednesday before the maintenance starts. You should also log off from public Windows systems (terminal servers) beforehand.

Maintenance caused by: Windows updates and the monthly maintenance work on the corresponding central computers

Regular Maintenance Slot: TSM (ADSM) backup server

Time: each Tuesday, 12:00 pm - 8:30 pm
Systems: all

Impact: The TSM backup servers will be partly down. It will not be possible to restore files on the central Unix or Windows systems from backups made by the TSM.

An apology must be made in advance: It is always possible that things do not work as planned. Therefore the given ending times may not be kept as promised.

Maintenance caused by: Update of the Service

more information about this entry

When digital security certificates are used in emails sent via Microsoft Outlook, it may occur that emails are sent incomplete.

Based on current findings, the issue arises after messages have already been saved as drafts. Starting from the second modification after the initial creation of a draft, changes are no longer saved in the message.

Please use one of the following workarounds to bypass the issue:

- Send emails via https://mail.desy.de
- Do not sign emails in Outlook with digital security certificates

For further details and step-by-step instructions, visit:
https://it.desy.de/services/e_mail/mail_clients/outlook/known_problems

The issue has been reported to the vendor for a problem solution.

The following two DESY standard PCs are currently no longer available from stock:

- Dell Pro Micro Lite QCM1250 (U5/16/512)
- Dell Pro 14 Plus PB14250 (with US keyboard)

If these devices are requested via the AMS, significantly longer delivery times must be expected. Depending on the outcome of the ongoing price negotiations, these devices may also no longer be available at the previous price.

Caused by; General shortage of RAM, hard drives, and SSDs on the market (see: https://www.techbook.de/pc-mac/hardware/dram-speicher-preis)

more information about this entry

In this storage service, the default settings for permissions when sharing a directory may lead to unplanned behaviour, which we would like to draw your attention to with this information.

The behaviour is based on the fact that the default settings also include the right to delete. The result can be that data becomes inaccessible to the person who shared the data if one of the persons with whom the data was shared moves it; this corresponds to copying it to the target folder and then deleting it in the source folder.
The files and directories are not lost, but are now in the directory tree of the person who moved them.

To work around this issue until it is fixed, the recommendation is not to move any data that has been shared with you via Sync & Share. Persons already affected will be informed directly.

A support request is in progress at the manufacturer.

If you have any questions, please contact uco@desy.de.
more information about this entry

On Tuesday, 14.04.2026, an automated upgrade to macOS 26 will be performed on all Macs registered in DESY’s device management tool "Jamf Pro".

Macs that have already been updated to macOS 26 by that date will not be affected. Devices running an older version will be upgraded and automatically restarted - unsaved data may be lost during this process.

Users will be notified in advance via system messages and notifications on affected devices. They are encouraged to perform the version update themselves before the centrally scheduled upgrade.

Necessary exceptions can be reported to the group administrators.

For detailed information on central update management for macOS devices, please visit:
https://xwiki.desy.de/xwiki/short/1a650
more information about this entry

As part of the campus power supply maintenance, updates and configuration changes were also implemented in the Computing Centre.

Among other things, the Kerberos realm "IFH.DE" was decommissioned, and all Zeuthen systems were migrated to the DESY-wide realm "DESY.DE".

If you're using Kerberos on self-administered devices, you should also update them accordingly.
The documentation in XWiki has been updated:

https://xwiki.desy.de/xwiki/bin/view/DV/DV-Zeuthen/Dokumentationen/Unix/BYOD/User-Info/#HBasicconfiguration

Please note:
Due to a decision by the RSR, the DESY.DE Kerberos servers are
no longer accessible worldwide.
For use from home office or from remote, an activation via https://it-access.desy.de/ is required - as with EduVPN.

In case of further questions, don't hesitate to contact uco-zn@desy.de.
more information about this entry

On April 14, 2026, email sending via SMTP/STARTTLS (port 587) will be disabled. All users who currently use email clients or services that send emails via this port must take action and update their configuration in time.

Please ensure that all affected email clients are switched to the currently recommended and secure SSL/TLS protocol by this date.

In the future, the following settings must be used for sending emails:

Server name: mail.desy.de
port 465
encryption: SSL/TLS

Depending on the email client, the naming of these options may vary — some clients may display only “SSL” instead of “SSL/TLS”; in such cases, please select “SSL”.

Authentication is performed using a Zimbra Application Code (see documentation below). As username, you may use either your email address or your DESY username.

Further information and setup instructions can be found at:
https://it.desy.de/dienste/e_mail/mail_clients/index_ger.html
https://it.desy.de/dienste/e_mail/mail_clients/thunderbird/index_ger.html

Background: Due to known vulnerabilities, STARTTLS (also referred to as “Opportunistic TLS”) is no longer considered secure and will therefore be discontinued.

more information about this entry

On Tuesday, 17.03.2026, the login for all SYMPA mailing list servers will be switched to the central single sign on service (Keycloak). After this change, authentication will only be possible using a DESY account or a federated account with a Helmholtz ID.

This measure is being implemented in coordination with D4 to enhance security.
more information about this entry