The below information was provided to the Fattmerchant team from TSYS Acquiring Solutions to assist merchants in updating their TLS software version. This bulletin is for merchants who have a Point of Sale device using TLS/SSL versions 1.0 or below.
TSYS Acquiring Solutions will discontinue support for Secure Socket Layer (SSL) 3.0 and Early Transport Layer Security (TLS) 1.0 protocols across all of our public internet facing services and
Impacts include connections for:
- Point of Sale (POS) terminals (downloads, authorizations, settlements, etc.)
- TransIT Platform, Merchant Center, TSYS MultiPASS, TSYS CounterPASS, TSYS WebPASS, Mobile Payment Acceptance, TSYS Hosted Payments
- File Transfer services
- VirtualNet SSL/TLS through public internet, Virtual Private Network (VPN), or Multiprotocol Label Switching (M LPS)
- Mobile / Wireless Payment services
The Payment Card Industry (PCI) Data Security Standard (DSS) Requirements and Security Assessment Procedures, version 3.2 (published April 2016) requires that existing POS applications and devices be remediated to use TLS 1.1 (1.2 preferred) by June 30, 2018.
Why is this happening?
SSL 3.0 and TLS 1.0 protocols that have been widely used to provide communication (protocol) security over the internet. As a result, SSL 3.0 and TLS 1.0 protocols are no longer considered effective options for protecting data across public networks.
Several highly visible SSL 3.0 or TLS 1.0 exploits have already been identified, demonstrating the general age and weakness of these protocols and why they must be replaced with new versions.
Clients using internet browsers to connect to TSYS Acquiring Solutions systems, services, or products must ensure that their browser can accept TLS 1.1 or later.
**Most VAR partners have reported that updates are already in progress. Specific information regarding the proper method of upgrading (such as software updates or terminal replacements) will vary and should be discussed with the VAR provider.**
Please contact your point of sale provider to see if this bulletin applies to you.
If you have any questions or need assistance with a new VAR sheet please contact Fattmerchant’s support team at (855) 550-3288 ext 2.