TLS Is Expiring
What Is Transport Layer Security?
TLS stands for “Transport Layer Security” and is the security protocol that allows computers to communicate over the internet securely, without the transmissions being vulnerable to anyone they aren’t intended for, such as hackers or fraudsters. Without TLS, you wouldn’t be able to use your credit card on eCommerce sites or log into your bank account online.
Due to several weaknesses found in TLS 1.0, many websites and internet services are now starting to require the use of TLS 1.2, or at least TLS 1.1. The latest PCI DSS requirements require that any site accepting credit card payments use TLS 1.2 after June 30, 2018. Failure to upgrade to the required version of TLS will prevent your business from processing payments until your business has become compliant.
Are You Ready for the June 30th PCI Deadline?
Some companies are taking the June 30, 2018 cut off date very seriously and have already implemented compliance standards. We have experienced merchants whose systems went down as early as February because their credit card processors set a compliance date sooner than June 30, 2018. In order to prevent this from happening to your business in the upcoming months, it’s important to be proactive and reach out to the appropriate parties and verify your version of TLS.
If you deal with one or more of the following platforms, products or connections, you will need to contact them to verify your TLS compliance to ensure your terminal, gateway, online store, or online system will not go down:
- Credit card processor
- Merchant processing company
- Point-of-Sale system
- Payment gateway provider
- Gift card or loyalty program provider
- Web developer, designer or host (if you have a web store)
- Web server
- .NET framework
- Internet Information Services (IIS)
It’s important to also be aware that you can’t look at a terminal or another piece of equipment and immediately be able to identify what version of TLS it is programmed with.
To check if your workstations are up to date:
- Go to: https://www.ssllabs.com/ssltest/viewMyClient.html
- Look under “Protocol Support,” There should be a message in green front that says: “Your user agent has good protocol support.”
For additional information regarding TLS: https://en.wikipedia.org/wiki/Transport_Layer_Security.
Curious how much your business could be saving with FortisPay?
Want weekly blog and social media updates from FortisPay? Opt-in to our newsletter: learnmore.fortispayments.com/subscribe/
Follow us on Facebook, Instagram, and Twitter @FortisPay