diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4ebe823c7df..9c925c102bd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,26 @@
+# 1.2.8 (2021-02-24)
+## Edge Agent
+### Bug Fixes
+* Fix underflow possibility on ColumnFamilyDbStore  ( [bc78f1c](https://github.com/Azure/iotedge/commit/bc78f1c0b0ab0dfa305b817c030b82cea035f6e0) )
+* Remove BouncyCastle dependency ( [403ca87](https://github.com/Azure/iotedge/commit/403ca87bc228421c8913c1431687267dee9112a7), [7589457](https://github.com/Azure/iotedge/commit/7589457deec0f2735711cb8973cac0f0e17046c1) )
+* Update `Microsoft.Azure.Devices.Client` SDK ( [4b7570f](https://github.com/Azure/iotedge/commit/4b7570f12b2de0875e29b19964c935e693933e82) )
+
+
+## Edge Hub
+### Bug Fixes
+* Fix underflow possibility on ColumnFamilyDbStore  ( [bc78f1c](https://github.com/Azure/iotedge/commit/bc78f1c0b0ab0dfa305b817c030b82cea035f6e0) )
+* Remove BouncyCastle dependency ( [403ca87](https://github.com/Azure/iotedge/commit/403ca87bc228421c8913c1431687267dee9112a7), [7589457](https://github.com/Azure/iotedge/commit/7589457deec0f2735711cb8973cac0f0e17046c1) )
+* Restart EdgeHub upon certificate renewal ( [c5e90a7](https://github.com/Azure/iotedge/commit/c5e90a75e9a89ff612ad8c60241b0039464c298d) )
+* Update `Microsoft.Azure.Devices.Client` SDK ( [4b7570f](https://github.com/Azure/iotedge/commit/4b7570f12b2de0875e29b19964c935e693933e82) )
+* Workaround for windows-certificate import problem for EdgeHub in Visual Studio debug runs ( [0ed0c71](https://github.com/Azure/iotedge/commit/0ed0c710e2fc38c6feda7c39cb71b6625e20e87d) )
+
+
+## aziot-edge
+### Bug Fixes
+* Remove `sudo` from `iotedge check` for local proxy setting check ( [5976efb](https://github.com/Azure/iotedge/commit/5976efb411b3edfd860494e081ed835637c96529) )
+* Update vulnerable regex package ( [a34fd5b](https://github.com/Azure/iotedge/commit/a34fd5bca7e58c01819da56dd73df817fbefeb7e), [fe7de0b](https://github.com/Azure/iotedge/commit/fe7de0b45363594d1f23b575eddb2947d38ace6a) )
+
+
 # 1.2.7 (2021-01-19)
 ## Edge Agent
 ### Bug Fixes
diff --git a/edgelet/Cargo.lock b/edgelet/Cargo.lock
index 920e41cf65e..48c1c825ebd 100644
--- a/edgelet/Cargo.lock
+++ b/edgelet/Cargo.lock
@@ -90,7 +90,7 @@ checksum = "cdb031dd78e28731d87d56cc8ffef4a8f36ca26c38fe2de700543e627f8a464a"
 [[package]]
 name = "aziot-cert-common-http"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "aziot-key-common",
  "serde",
@@ -99,7 +99,7 @@ dependencies = [
 [[package]]
 name = "aziot-certd-config"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "hex 0.4.2",
  "http-common",
@@ -161,7 +161,7 @@ dependencies = [
 [[package]]
 name = "aziot-identity-common"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "aziot-key-common",
  "http-common",
@@ -171,7 +171,7 @@ dependencies = [
 [[package]]
 name = "aziot-identity-common-http"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "aziot-cert-common-http",
  "aziot-identity-common",
@@ -184,7 +184,7 @@ dependencies = [
 [[package]]
 name = "aziot-identityd-config"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "aziot-identity-common",
  "http-common",
@@ -196,7 +196,7 @@ dependencies = [
 [[package]]
 name = "aziot-key-client"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "aziot-key-common",
  "aziot-key-common-http",
@@ -211,7 +211,7 @@ dependencies = [
 [[package]]
 name = "aziot-key-common"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "serde",
 ]
@@ -219,7 +219,7 @@ dependencies = [
 [[package]]
 name = "aziot-key-common-http"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "aziot-key-common",
  "http-common",
@@ -229,7 +229,7 @@ dependencies = [
 [[package]]
 name = "aziot-key-openssl-engine"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "aziot-key-client",
  "aziot-key-common",
@@ -247,7 +247,7 @@ dependencies = [
 [[package]]
 name = "aziot-keyd-config"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "http-common",
  "libc",
@@ -257,7 +257,7 @@ dependencies = [
 [[package]]
 name = "aziot-keys-common"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "pkcs11",
  "serde",
@@ -267,7 +267,7 @@ dependencies = [
 [[package]]
 name = "aziot-tpmd-config"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "http-common",
  "serde",
@@ -276,7 +276,7 @@ dependencies = [
 [[package]]
 name = "aziotctl-common"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "anyhow",
  "aziot-certd-config",
@@ -502,7 +502,7 @@ dependencies = [
 [[package]]
 name = "config-common"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "serde",
  "toml",
@@ -1142,7 +1142,7 @@ dependencies = [
 [[package]]
 name = "http-common"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "async-trait",
  "base64 0.13.0",
@@ -1701,7 +1701,7 @@ dependencies = [
 [[package]]
 name = "openssl-build"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "cc",
 ]
@@ -1738,7 +1738,7 @@ dependencies = [
 [[package]]
 name = "openssl-sys2"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "openssl-build",
  "openssl-sys",
@@ -1747,7 +1747,7 @@ dependencies = [
 [[package]]
 name = "openssl2"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "foreign-types",
  "foreign-types-shared",
@@ -1810,7 +1810,7 @@ checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
 [[package]]
 name = "pkcs11"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 dependencies = [
  "foreign-types-shared",
  "lazy_static",
@@ -1827,7 +1827,7 @@ dependencies = [
 [[package]]
 name = "pkcs11-sys"
 version = "0.1.0"
-source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#0181b9d153e721e5a1a8665a671a8f765df7fca2"
+source = "git+https://github.com/Azure/iot-identity-service?branch=release/1.2#ff90e7d71b08b8bd74a5c4adfd6b2d73fda39ac7"
 
 [[package]]
 name = "pkg-config"
diff --git a/edgelet/contrib/centos/aziot-edge.spec b/edgelet/contrib/centos/aziot-edge.spec
index e8a7e71f139..3ed7b5ad07d 100644
--- a/edgelet/contrib/centos/aziot-edge.spec
+++ b/edgelet/contrib/centos/aziot-edge.spec
@@ -17,7 +17,7 @@ URL:            https://github.com/azure/iotedge
 %{?systemd_requires}
 BuildRequires:  systemd
 Requires(pre):  shadow-utils
-Requires:       aziot-identity-service = 1.2.5-1
+Requires:       aziot-identity-service = 1.2.6-1
 Source0:        aziot-edge-%{version}.tar.gz
 
 %description
diff --git a/edgelet/contrib/debian/control b/edgelet/contrib/debian/control
index 650ca32e98c..1c7f8e9ca9a 100644
--- a/edgelet/contrib/debian/control
+++ b/edgelet/contrib/debian/control
@@ -8,7 +8,7 @@ Homepage: https://github.com/azure/iotedge
 
 Package: aziot-edge
 Architecture: any
-Depends: ${misc:Depends}, ${shlibs:Depends}, adduser, ca-certificates, hostname, aziot-identity-service (= 1.2.5-1), sed
+Depends: ${misc:Depends}, ${shlibs:Depends}, adduser, ca-certificates, hostname, aziot-identity-service (= 1.2.6-1), sed
 Description: Azure IoT Edge Module Runtime
  Azure IoT Edge is a fully managed service that delivers cloud intelligence
  locally by deploying and running artificial intelligence (AI), Azure services,
diff --git a/edgelet/version.txt b/edgelet/version.txt
index c04c650a7ad..db6fb4a9113 100644
--- a/edgelet/version.txt
+++ b/edgelet/version.txt
@@ -1 +1 @@
-1.2.7
+1.2.8
diff --git a/versionInfo.json b/versionInfo.json
index 97f0091c8a2..cda52763cab 100644
--- a/versionInfo.json
+++ b/versionInfo.json
@@ -1,5 +1,5 @@
 {
-  "version": "1.2.7",
+  "version": "1.2.8",
   "build": "BUILDNUMBER",
   "commit": "COMMITID"
 }