VitalSource TLS Standards Deprecation

As of 1-Nov-2020 VitalSource will no longer accept traffic using encryption standards below TLS 1.2. This change will be implemented gradually starting 1-Oct-2020.

TLS 1.1 and 1.0 standards will no longer be accepted. If your organization does business with VitalSource (via integration), please ensure that all servers and intermediary services use TLS 1.2 or higher.

As a matter of reference, TLS 1.2 replaced TLS 1.1 in 2008, and the final deprecation of TLS 1.1 was completed in March 2020.The PCI Council suggested that organizations migrate from TLS 1.0 to TLS 1.1 or higher before June 30, 2018. In October 2018, AppleGoogleMicrosoft, and Mozilla jointly announced they would deprecate TLS 1.0 and 1.1 in March 2020 (article here).

Rollout of the Deprecation

VitalSource will perform a staged upgrade process during which you can test and verify your ability to complete TLS-compliant transactions.

Stage 1

Dates – until 1-Oct-2020

TLS standards – All TLS traffic accepted

Stage 2

Dates & Times – October 2020, all times except those listed in the table below

TLS standards – All traffic accepted, except during upgrade windows

VitalSource will begin rolling upgrade windows that will increase in duration according to the schedule listed in the table below.

Only TLS 1.2 & 1.3 traffic will be accepted during upgrade windows. Please make sure to actively monitor your ability to transact during these windows. Any failed transactions should be resubmitted either outside the upgrade windows or using TLS 1.2 or 1.3.

Upgrade Windows

Dates (week of)

Time

TLS Decline

1-Oct-2020 through 4-Oct-2020

14:00 UTC – 15:00 UTC (1 hr)

1.0 & 1.1

5-Oct-2020 through 11-Oct-2020

14:00 UTC – 16:00 UTC (2 hrs)

1.0 & 1.1

12-Oct-2020 through 18-Oct-2020

14:00 UTC – 18:00 UTC (4 hrs)

1.0 & 1.1

19-Oct-2020 through 25-Oct-2020

14:00 UTC – 22:00 UTC (8 hrs)

1.0 & 1.1

26-Oct-2020 through 1-Nov-2020

14:00 UTC – 02:00 UTC (12 hrs)

1.0 & 1.1

 

Stage 3

Date – 1-Nov-2020

TLS standards – All traffic below TLS 1.2 declined

Was this article helpful?
0 out of 0 found this helpful

Comments

0 comments

Article is closed for comments.