Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster
Apr 12, 2001
70,682
42,453


Logitech users on macOS found themselves locked out of their mouse customizations yesterday after the company let a security certificate expire, breaking both its Logi Options+ and G HUB configuration apps.

Logitech-MX-Master-3S.jpg

Logitech devices like its MX Master series mice and MX Keys keyboards stopped working properly as a result of the oversight, with users unable to access their custom scrolling setup, button mappings, and gestures. It wasn't long before the Logitech subreddit was awash with frustrated reports as people discovered their configured peripherals had suddenly reverted to default settings.

The Developer ID certificate is the digital signature macOS uses to verify legitimate software. The certificate that Logitech allowed to lapse was being used to secure inter-process communications, which resulted in the software not being able to start successfully, in some cases leading to an endless boot loop.

Logitech has since released a patch for macOS 26 Tahoe, macOS 15 Sequoia, macOS 14 Sonoma, and macOS 13 Ventura that resolves the issue. However, users need to download and install it themselves, since the certificate expiry also prevented the apps' built-in updaters from working. From Logitech's support page acknowledging the issue:
The problem was caused by an expired certificate required for the apps to run. Because the certificate also affected the in‑app updater, you will need to manually download and install the updated version of the app. Please do not uninstall the app.
Older macOS versions will get a fix "at a later time," the support page adds. On a positive note, it seems user settings survived the blunder, with Logitech promising that profiles and customizations remain intact after manual patching is completed.

"We dropped the ball here. This is an inexcusable mistake," Logitech spokesperson ATXsantucci admitted on Reddit. "We're extremely sorry for the inconvenience caused."

(Thanks, Brad!)

Article Link: Logitech Blames 'Inexcusable Mistake' After Certificate Expiry Breaks macOS Apps
 
Last edited:
Mostly fixed for me after the patch. But left clicking in Safari now downloads linked files after clicking on some things.
 
Happened to me. I use the MX Anywhere 3S and a POP ICON keyboard. Lost all my customization.

I know it was an expired certificate by Logitech, but does this have anything to do with the OCSP app verification, that Apple said we would be able to opt-out of, almost six years ago? If one were opted out, would it have launched anyway?

 
Last edited:
I do software consulting, mostly around project rescues for failed/failing projects. This happens all the time. We actually track certificate expirations even after we’re done with our work, and will notify clients years later so that they can be sure to update them before they expire. But, nearly as often as not, they don’t and then we get a frantic call because the thing we built for them suddenly stopped working one day.
 
Oh I know how this kind of thing happens...someone who is responsible for this has it on their calendar, they leave the company, new replacement doesn't know anything about it, and it lapses.

I may have seen this play out many times throughout my IT/Software dev career....
This is exactly it. I've stopped allowing people to put this in their personal calendars, its shared team/department calendar only.
 
I discovered this this morning. Was a pain in the ass. Ended up redownloading the app and them having to remember all my key binds etc. Luckily it worked but it wasted about an hour of my time.
 
  • Like
Reactions: Wx_Man
Oh I know how this kind of thing happens...someone who is responsible for this has it on their calendar, they leave the company, new replacement doesn't know anything about it, and it lapses.

I may have seen this play out many times throughout my IT/Software dev career....
Not for a company this size. This should not rest on one person but should be on a calendar/ To do list. This is not a mom and pop shop, Logitech is worth almost $13 billion. I have not used my PC in a few days so I am assuming I will have to do some fixing for my mouse. Not angry about it, first world problems. I do wonder how this slipped though.
 
I dont want to rely on an online service to be able to do a back click in Safari from my mouse.

It happened offline or online. The certificate expired locally.
The critique here is actually about how MacOS doesn't care for the otherwise standard Mouse4 and Mouse5 buttons which you need software (from logitech or elsewhere) to get working as expected.

Anyway, if it wasn't DNS then certificates are usually a good second suspect.
 
Oh I know how this kind of thing happens...someone who is responsible for this has it on their calendar, they leave the company, new replacement doesn't know anything about it, and it lapses.

I may have seen this play out many times throughout my IT/Software dev career....
Yep! In my experience it was often someone whose position was outsourced because the leaders didn’t know what they did.
 
  • Like
Reactions: G5isAlive
It's crazy that your hardware could be rendered useless (or gimped) if a dev doesn't keep on top of their certificates.

What happens when the dev goes out of business? This wasn't thought out very well.

That being said, I use USB Overdrive instead.

Wasn't aware of that app. Thanks!
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.