Action Needed: Required TLS v1.2 Security Protocol Upgrade
To keep your data safe, the Payment Card Industry Security Standards Council (PCI SSC) has mandated a security upgrade.
Used widely online, TLS is a cryptographic protocol used to establish a secure communication channel between two systems. Recently, multiple vulnerabilities have been uncovered and all merchants need to upgrade to the most current version of TLS (Version 1.2).
What needs to be done to be ready for the switch to TLS 1.2 depends on how you process transactions. Here are methods of processing and what needs to be done for each.
-
If you use the Virtual Terminal, gateway web site or BlueView, your web browser must support TLS 1.2 by May 31, 2018. You can test your web browser by going to the following URL. If the page loads your web browser is ready. If the page does not load your web browser needs to be updated. https://loadtest.stg.bluepay.com/interfaces/shpf?SHPF_FORM_ID=TLSTEST
-
If you are using a service provided by a third party, you should check with them to verify they will still be able to communicate to BluePay after the switch to TLS 1.2 on May 31, 2018. The service provider can be referred to Integration Support if they need help testing their application.
-
If you wrote your own application which sends transactions to the BluePay gateway, you should test your application using the test URLs prior to May 31, 2018. A response message of "TLS 1.2 Success" means the application is ready for the switch to TLS 1.2.
- BluePay 1.0 Post
- BluePay 2.0 Post
- BluePay 2.0 XML Post
- BluePay Authorize.net Emulator
-
If you are using a BluePay hosted payment form, you should be aware that your customer's web browsers must support TLS 1.2 for them to be able to make payment after May 31, 2018.
-
If you receive credit card information on your web server, TLS 1.0 & 1.1 should be removed from that web server by June 30, 2018.
-
If you use a stand alone IP terminal, you should contact Merchant Services (866) 739-8324 prior to February 15, 2018 to verify if a terminal update is necessary.
We Are Here to Help!
Assistance is available by calling BluePay Integration Support at (800) 350-2684, emailing integrationsupport@bluepay.com, or live chatting at www.bluepay.com.
Sincerely,
The BluePay Team
