/
Google Connector PEM File Update (11/9/2025)

onPhase Forms latest - This documentation is for onPhase Forms v11.3. Not for you? Earlier documentation is available too.

Google Connector PEM File Update (11/9/2025)

Background

The Google Connector service account relies on a .pem file to authenticate your Google account with onPhase’s Forms server. The 10-year self-signed certificate on the onPhase Forms server expires on November 9, 2025. On November 8th around midnight, a new certificate will be immediately applied tied to a new .pem file.

Who is affected?

Only customers using the NEW Google Connector are affected. If you use the Legacy Google Connector with an oAuth token, you are not impacted.

What is the impact?

When the certificate is replaced (around midnight on Nov 8, 2025), your forms that work with the Google Connector will stop pulling data from and pushing data and documents to Google sheets and drive folders.

You should expect down time for your Google Connector functions. If you are able to update the Google Service account over the weekend, when there is hopefully less activity on your forms, your impact may be minimal.

Resolution Steps

The steps below reference this Google documentation. https://support.google.com/a/answer/7040511?hl=en&sjid=5234025310078046280-NA

On or after November 9th, 2025, please follow these steps to update your Google Connector service account with the new .pem file. These steps should take less than 15 minutes.

  1. Download the new .pem file here.

  2. Login to the Google Cloud Console.

    image-20251107-174513.png

  3. Select the correct Project.

  4. From the upper-left menu, select APIs & Services, then Credentials.

    image-20251107-174950.png

  5. Towards the bottom, click the Service Account you use with onPhase Forms.

    image-20251107-175249.png

  6. Click the Keys tab.

    image-20251107-175339.png

  7. Click Add Key and select “Upload existing key”

    image-20251107-175420.png

  8. Browse for the .pem file you downloaded in step 1 and upload it.

  9. image-20251107-175521.png

    The new key will be displayed. (You may need to refresh your browser to see it.)

    image-20251107-202702.png

No update to your onPhase tenant or forms are needed. Once the new .pem is applied, your Google Connector functions will begin working again.

How can I get help with this?

onPhase is committed to making this process as least disruptive as possible. We will offer a complimentary live support/professional services session to walk you through this update. To access this support, you can

  • Click this booking link, which includes extended hours for the week following the update.
    or

  • Email support@onphase.com and request a call with a support team member, including your preferred date and time. Please include “Google PEM update” in your email subject line. They will respond with a meeting invite or additional booking link.

What is the long-term impact?

We recognize this is disruptive and as such, our development team is exploring an upgrade to the new Google Connector that does not rely on a certificate so this action will not be necessary in the future. This is a one-time action. You will receive release announcements and notes when any future upgrade is made available.