AnnouncementsIf you are a client of KeyBank APIs, look here to stay up to date on the latest changes, enhancements, and required maintenance tasks.These announcements are for information purposes only. If you have specific questions or concerns, please reach out to your Technical Account Manager.August 2026Improved client portal experienceThe Developer Portal now has an authenticated space for our KeyBank API consumers and prospective clients. If you are currently a KeyBank API consumer, sign up to create a user account and get access enhanced resources like API documentation and developer resources.While our public portal will continue to provide high-level general information about KeyBank API offerings, the client portal experience unlocks deeper documentation, downloadable specifications, and onboarding materials.To access the secured portal, you will need to sign up and create an account. This applies to our current API partners and vendors. Check out the Account setup guide to get help setting up your account.DigiCert changes for mTLS certificatesTo improve security with mTLS certification, DigiCert is removing the Client Authentication Extended Key Usage (EKU) from its public TLS certificates and moving to the Public Key Infrastructure (PKI). This change aligns with Google Chrome’s root program requirements, which mandate dedicated TLS hierarchies for better security and interoperability.To view the details and specifications from DigiCert, see Sunsetting Client Authentication EKU from DigiCert Public TLS Certificates. What do I need to doIf you use DigiCert mTLS certificates, you must transition to DigiCert's X9 PKI and set up a private PKI for internal authentication needs. We recommend reviewing your certificate enrollment settings now and proactively setting up your DigiCert certification.Deadline AwarenessOctober 1, 2025: DigiCert stops adding Client Authentication EKU by default.March 1, 2027: Client Authentication EKU removed from all new, renewed, or reissued public TLS certificates.