Post Date

August 29, 2016

UPDATE

SHA-2 MIGRATION: IMMEDIATE ACTION REQUIRED

 

Over the past several months, Switch Commerce has been sending communications concerning the expiration of the SHA1 certificates and the urgent need to update your ATMs to accept the SHA2 certificate. The effective date was to be August 14th, 2016.

In researching the SHA2 certificate implementation we identified issues encountered by customers processing with our competitors due to inconsistent information provided by manufacturers on the updates needed for SHA2 compliance. The Switch Commerce team undertook a project to reduce the impact on our customers.

The Switch team worked with a certificate authority to obtain a solution. The solution will allow us to provide customers additional time to upgrade. As a result, SHA1 configured terminals continue to process normally without impact.

The solution came at a substantial cost to Switch Commerce however; this is only temporary.

What is the new deadline?

Switch Commerce has scheduled a four (4) day discontinuance for SHA1 support, starting 1am CST Thursday, October 6th, 2016 until 4am CST Monday, October 10th, 2016. During this time period, terminals not supporting SHA2 will cease to operate. This is to assist you and your deployers in identifying any terminals not yet updated to SHA2 prior to the final deadline.

The final deadline to update your ATM terminals to SHA2 compliance is 1am CST Monday, October 24th, 2016. Switch Commerce will not be able to provide processing for terminals operating without SHA2 support after this time.

You must complete your upgrades immediately. If the temporary solution causes issues for terminals supporting SHA2 at any time before the final deadline of October 24th, we will be forced to immediately proceed with implementing SHA2 support only.

Please address the urgency of this matter with your teams and deployers. Contact your terminal manufacturer to obtain all information, downloads and patches needed to make your terminals SHA2 compliant.

Post Date

July 11, 2016

Revised August 29, 2016

SHA-2 MIGRATION: IMMEDIATE ACTION REQUIRED

 

On October 24, 2016, terminals communicating to Switch Commerce, via TCP/IP using older communication security certificates (SHA-1), will no longer be able to process transactions. It is imperative you ensure your terminals have been updated with the latest software and security certificates. Wireless and dial up terminals should not be affected.

In 2013 Microsoft and other large communication network organizations announced dates for the end of life of the SHA-1 certificates in  2016.  Unfortunately, this is a security compliance requirement outside of the control of Switch Commerce.

Switch Commerce is researching if there is any way for us to help you identify terminals that may be at risk. Please contact Switch Commerce Customer Support if you have any questions.

Check with your ATM manufacturers to obtain the required software version levels needed to support the new security certificates (SHA-2).

What You Need To Know

  • October 24,2016 SHA-1 SSL Certificates will expire
  • TCP/IP terminals using SHA-1 certificates will not be able to process
  • Dial and wireless terminals should not be affected
  • Ensure your terminals have the latest software to prevent problems with communication

Keep Better Records with MobileTMS

Did you know that you can keep track of your terminal software versions in MobileTMS?

  1. Log on MobileTMS
  2. Tap EDIT TERMINAL in navigation menu
  3. Search for your terminal by TID or Location Name
  4. Enter the Software Version

Download MobileTMS for free today!

Need help or have questions?

Contact Customer Support

© 2002-2017 Switch Commerce, LLC.

Toll Free 1 (877) 550-1310