On March 16, 2018, Sage Intacct will disable support for TLS version 1.0 and below.
Sage Intacct takes the security of our customers very seriously. To enhance security and meet compliance requirements, we are mandating the use of TLS 1.1 (and later) encryption technologies to access our cloud software.
What is TLS?
Transport Layer Security (TLS) is a protocol that provides security and privacy by encrypting data shared over a network. TLS is typically used by web browsers and other applications that must securely exchange data. The current available versions of TLS are 1.0, 1.1 and 1.2. Currently TLS 1.1 and 1.2 are considered secure by various security standards organizations.
How does Sage Intacct use TLS?
Sage Intacct uses TLS to secure both browser (user interface) and Web Services (API) access to our application.
How will users/developers be impacted?
Once Sage Intacct disables support for TLS 1.0, any browser UI access or API call originating from a resource that does not support TLS 1.1 or above will fail.
What do users/developers need to do?
If you are logging into Sage Intacct with a web browser, ensure that your browser supports TLS 1.1 and above (most modern browsers do). You can use the following third-party resource to test your browser’s compatibility:
- How's My SSL? https://www.howsmyssl.com/
If you are a developer or partner using Web Services, you must ensure your application is configured to negotiate connections using TLS 1.1 or above. Depending on the programming language and OS, the requirements will vary. Below is some helpful info for a few popular languages and version. You should still test your code and not solely rely on this information.
|PHP||Ensure your PHP version supports cURL version 7.34.0 or newer|
|Java||Java 8: No action required
Java 7: Explicitly enable support for TLS 1.1 and above
Java 5 or earlier versions: Upgrade to Java 6 or above
|.NET||.NET 4.6: No action required
Earlier versions: Research required changes
Developers that want to test API clients under their control can use the following resources:
- Sage Intacct temporary testing endpoint URL: https://api-tls-test.intacct.com/ia/xml/xmlgw.phtml
- API - How's My SSL? https://www.howsmyssl.com/s/api.html
Do you need help? Contact Sage Intacct Customer and Partner Support.