RESOLVED:

UNM Central Campus services have been reconnected to the Health Sciences Center. You can once again use your HSC NetID to sign in to UNM applications. Some of the more commonly used applications include Canvas, Chrome River, LoboTime, and Banner.  You may experience brief delays over the next few hours as the networks resume normal communication.

The services had been temporarily disconnected since Monday, Oct. 26, in response to the cybersecurity event. 

Thank you for your patience while our teams worked to restore access.

******

ORIGINAL POST:

UNM Health is responding to a cybersecurity issue affecting some systems at the UNM Health Sciences Center (HSC). HSC IT teams are working to resolve it.

Main campus and branch campus systems and services are not affected at this time. Services provided by or through HSC may be temporarily disrupted or unavailable, and HSC employees may temporarily lose access to some UNM-wide services.

Users may be unable to view contacts and Speed Dial entries in Microsoft Teams, Outlook desktop and mobile

Affected users may observe missing contacts, blank or grey placeholder entries, or Speed Dial entries that can't be re-added. This behavior may occur across Microsoft Teams desktop and web experiences, Outlook Mobile, and Outlook desktop. More specifically, this issue impacts in-tenant contacts created in Microsoft Teams using the Notify when available presence notification option.

Microsoft is aware of the issue and will provide an update by Wednesday, November 11, 2026 at 4:00 AM MST

In August and September local calls were billed in error under UNM Phone Line Services at long distance rates. UNM IT Voice Networks is aware of the issue and working with the vendor to develop a plan to reverse the charges.  We do not have a timeframe yet on when the corrections will be completed, but credits are expected to be issued." 

The update is scheduled to take place on November 7, 2026, at 11:00 AM.

Learning Central is transitioning to an updated, vendor-hosted user interface designed to provide a more modern experience.

Please note the following key details regarding this change:

Website Address: The access link remains unchanged. You will continue to go to learningcentral.unm.edu, which will automatically redirect you to the new vendor-hosted site.

Sign-In Process: The login steps remain the same. Sign in using your UNM email or Salud email, depending on your account setup and role.

Records and Training: Your current training history, assigned courses, and platform records will remain fully accessible in the new interface.

Multiple reports of users unable to sign into the UNM Web Store and goto.unm.edu

UNM IT is aware of the issue and is working to resolve as soon as possible.

The UNM Software Store may be unavailable during this maintenance. 

In an effort to improve account security, Microsoft announced their demise of text message (SMS) and phone calls for multifactor authentication in February of 2027. Starting around 9/8, customers may see a notice from Microsoft encouraging the use of passkeys. 

No immediate action is necessary, but we recommend adding a new MFA method (steps below) before the deadline to avoid login delays.

Tens of thousands of UNM users utilize the text or phone call method, so we ask that people attempt to set this up on their own and avoid contacting UNM IT at this time to keep the phone lines open for more time-sensitive issues. UNM IT will provide updates in the near future for the best contact method if you are unable to set up a new method on your own.

Our recommendation at this time is as follows: If you are familiar with passkeys, this will likely be an easy setup and will provide a better login experience. If you are not familiar with passkeys, the Microsoft Authenticator app may be a better solution.

We recognize that both of these require a smartphone, so if you do not have a smartphone, keep an eye out for the update with the best contact method and we can discuss other options.

Staff and Faculty using department issued/managed machines can also set up Windows Hello for a more streamlined login and authentication process.

Knowledge articles to assist with the change:

Adding a method

Microsoft Authenticator App

General MFA info and setups

Windows Hello

There is an issue with the Alarm Receivers which is causing some communication errors. Once it is resolved the system should automatically clear out of these errors. In the meantime you can clear the beeping by hitting enter until it says 'enter code to clear display' punch in your code and hit enter.

We are seeing a noticeable increase in phishing and email spoofing attempts targeting our organization. These messages may appear to come from trusted sources but are designed to trick recipients into clicking malicious links, downloading harmful attachments, or providing sensitive information.

Please remain vigilant and use caution when reviewing emails—especially those that:

• Urge immediate action or create a sense of urgency

• Contain unexpected attachments or links

• Request login credentials, financial information, or sensitive data

• Appear to come from internal contacts but have unusual formatting or tone

• Continue to monitor for known phish attempts at https://ispo.unm.edu/phish-bowl

How to Report Suspicious Emails in Microsoft Outlook Web (OWA):

1. Do not click any links or download attachments.

2. Open the suspicious email.

3. Click the “Report” button in the toolbar (this may appear as “Report Message” or a phishing icon).

4. Select “Phishing” or “Junk”, as appropriate.

5. Submit the report. The message will be sent to IT/security for review and removed from your inbox.

More information in reporting email can be found in the following knowledge article: https://unm.service-now.com/kb/en/how-do-i-report-spam-or-phishing-email?id=kb_article_view&sysparm_article=KB0016353

InCommon SSL/TLS certificate lifespans were reduced to a maximum of 200 days on March 15, 2026. This is a vendor change outside UNM's control.

This applies to all certificate types as enforced by the global governing organization, Certificate Authority Browser Forum. Lifespans will be further reduced to 100 days On March 15, 2027, and to 47 days on March 25, 2029. The purpose of this change is to reduce risk by decreasing validation periods.  

The current recommended solution is certificate automation using the ACME protocol with tools like certbot (https://certbot.eff.org/).
*Note: Wildcard certificates can currently only be requested as a Subject Alternate Name (SAN) on a Multidomain certificate profile. The Common Name (CN) of the certificate must not be a wildcard.

The University of New Mexico is upgrading its campus phone system to replace aging equipment that will no longer be supported after December 2026. This upgrade will help ensure reliable service and support the university’s future communication needs.

The project is actively underway, and buildings will be contacted and scheduled for transition in phases. Departments will receive more information as their building’s upgrade approaches. A timeline of identified buildings and upcoming phases is available on the Voice System Replacement Project Website.

For questions or more information, please contact the project team at voiceproject@unm.edu.

To ensure continued security UNM IT is performing maintenance on the voice mail system Tuesday November 24th 2026, beginning at 6:00 pm. During the three hour window the voice mail system will be intermittently unavailable.
If users experience any issues with their voice mail services after the maintenance window please contact the IT Support Center at 505-277-5757.