Over the past several months, Switch Commerce has been sending communications concerning the expiration of the SHA1 certificates and the urgent need to update your ATMs to accept the SHA2 certificate. The effective date was to be August 14th, 2016.
In researching the SHA2 certificate implementation we identified issues encountered by customers processing with our competitors due to inconsistent information provided by manufacturers on the updates needed for SHA2 compliance. The Switch Commerce team undertook a project to reduce the impact on our customers.
The Switch team worked with a certificate authority to obtain a solution. The solution will allow us to provide customers additional time to upgrade. As a result, SHA1 configured terminals continue to process normally without impact.
The solution came at a substantial cost to Switch Commerce however; this is only temporary.
What is the new deadline?
Switch Commerce has scheduled a four (4) day discontinuance for SHA1 support, starting 1am CST Thursday, October 6th, 2016 until 4am CST Monday, October 10th, 2016. During this time period, terminals not supporting SHA2 will cease to operate. This is to assist you and your deployers in identifying any terminals not yet updated to SHA2 prior to the final deadline.
The final deadline to update your ATM terminals to SHA2 compliance is 1am CST Monday, October 24th, 2016. Switch Commerce will not be able to provide processing for terminals operating without SHA2 support after this time.
You must complete your upgrades immediately. If the temporary solution causes issues for terminals supporting SHA2 at any time before the final deadline of October 24th, we will be forced to immediately proceed with implementing SHA2 support only.
Please address the urgency of this matter with your teams and deployers. Contact your terminal manufacturer to obtain all information, downloads and patches needed to make your terminals SHA2 compliant.
On October 24, 2016, terminals communicating to Switch Commerce, via TCP/IP using older communication security certificates (SHA-1), will no longer be able to process transactions. It is imperative you ensure your terminals have been updated with the latest software and security certificates. Wireless and dial up terminals should not be affected.
In 2013 Microsoft and other large communication network organizations announced dates for the end of life of the SHA-1 certificates in 2016. Unfortunately, this is a security compliance requirement outside of the control of Switch Commerce.
Switch Commerce is researching if there is any way for us to help you identify terminals that may be at risk. Please contact Switch Commerce Customer Support if you have any questions.
Check with your ATM manufacturers to obtain the required software version levels needed to support the new security certificates (SHA-2).
Contact Customer Support
972-550-8900 | email@example.com