Deprecation - TLS standards - Nov 2020

Originally announced June-2020, updated throughout

As of 10-Nov-2020 VitalSource will no longer accept traffic using encryption standards below TLS 1.2. This change will be implemented gradually starting 1-Oct-2020.

TLS 1.1 and 1.0 standards will no longer be accepted. If your organization does business with VitalSource (via integration), please ensure that all servers and intermediary services use TLS 1.2 or higher.

As a matter of reference, TLS 1.2 replaced TLS 1.1 in 2008, and the final deprecation of TLS 1.1 was completed in March 2020.The PCI Council suggested that organizations migrate from TLS 1.0 to TLS 1.1 or higher before June 30, 2018. In October 2018, Apple, Google, Microsoft, and Mozilla jointly announced they would deprecate TLS 1.0 and 1.1 in March 2020 (article here).

Rollout of the Deprecation

VitalSource will perform a staged upgrade process during which you can test and verify your ability to complete TLS-compliant transactions.

Stage 1

Dates – until 1-Oct-2020

TLS standards – All TLS traffic accepted

Stage 2

Dates & Times – October 2020, all times except those listed in the table below

TLS standards – All traffic accepted, except during upgrade windows

VitalSource will begin rolling upgrade windows that will increase in duration according to the schedule listed in the table below.

Only TLS 1.2 & 1.3 traffic will be accepted during upgrade windows. Please make sure to actively monitor your ability to transact during these windows. Any failed transactions should be resubmitted either outside the upgrade windows or using TLS 1.2 or 1.3.

Upgrade Windows

Stage 3

Date – 10-Nov-2020

TLS standards – All traffic below TLS 1.2 declined