Merchants must upgrade to TLS 1.2 before February 15, 2018 to avoid permanent service disruptions.
Data security is the foundation of every transaction. In an effort to continue to offer a secure means of communication to our systems, our back-end processor CardConnect is upgrading its systems and applications to accept Transport Layer Security (TLS) 1.2. This means that we will no longer support communications made with the TLS 1.0 and TLS 1.1 protocols beginning March 31, 2018.
What is TLS?
The Transport Layer Security (TLS) protocol encrypts and authenticates the data that is passed between communicating applications and their end users. For example, when you enter your login credentials on a website, TLS prevents a third-party from stealing the information that is exchanged during the login process.
The PCI (Payment Card Industry) Security Standards Council, which defines security and safety rules for the payments industry, no longer considers TLS 1.0 and TLS 1.1 to be a secure form of encryption because it is vulnerable to various types of attacks. As a result, all service providers and merchants who process or transmit credit card data must take the necessary measures to ensure that their systems and applications are upgraded to accept the TLS 1.2 protocol.
For additional information on TLS and the risks that are present when using TLS versions 1.0 and 1.1, please refer to the PCI Security Standards Council’s Information Supplement on Migrating from SSL and Early TLS.
You may fall into one of these two TLS ‘impact categories’ that each has a corresponding course of action:
- (1) Terminal Replacements: Contact Singular Payments for options replace an out-of-date terminal at 877-829-2170.
- (2) Downloads: Contact the support number on your statement and then select the Terminal Help Desk option to implement an update download to your terminal.
For a full list of terminals that are TLS 1.2 ready (and TLS 1.2 incompatible), please click here. For questions and to determine what you need to do, please contact CardConnect directly at 877.828.0720.