SSL to TLS Conversion Information Are You Ready?

Transcription

1 What is TLS? Transport Layer Security, or TLS, is a more secure communication protocol used to further prevent hackers from eavesdropping or tampering with internet related messages. This is the new standard for internet communication as recent hacking attempts known as the POODLE (Padding Oracle On Downgraded Legacy Encryption) attack has demonstrated that SSL communication is no longer secure and must be phased out. Processors and manufacturers have been working on becoming compliant with this mandate since the beginning of this year, and they are in the final stages of ceasing SSL support. What this means is any device that communicates via an internet connection must be able to support TLS encryption before SSL is eliminated! How to Ensure Your ATM is TLS Compliant Each ATM manufacturer has released software updates to ensure their supported products will work with TLS encryption methods. PAI has posted this software on the Software Website (can be accessed when logging into as well as instructions for updating ATMs to the newest version of software. PAI Reports is also equipped with new software identification features that easily allows for viewing the current software version on any FIS Standard 3 (Triton emulation) machine. Here are the minimum software requirements for each manufacturer: HANTLE /GENMEGA MODELS These models must have or higher software version in order to be compatible with TLS communication. HYOSUNG MODELS 1800CE, 5000CE, and 5300CE must have or higher software for TLS compatibility. 1800SE, 2700, 2700T, 4000W, 5000SE, HALO, HALO2, 5200SE and 1500SE models must have or higher software to be TLS compatible. TRITON MODELS RL series ATMs (RL1600, RL2000, RL5000, RT2000, FT5000) must use program version or higher software for TLS compatibility. Traverse and Argo ATMs are already TLS compliant and will not need any software updates , Page 1

2 Frequently Asked Questions What if my ATM is using a wireless unit? If the wireless unit is a Systech wireless unit, then you re in good shape! All Systech wireless units are compatible with TLS and will not require any updates. However, if the ATM is using a JBM C or D series unit (200 or 201 units) then it will need to be replaced. What if my ATM is using a phone line? ATMs that are using a phone line will not be affected by this update. Only ATMs that are using an internet connection will require thee software to be updated for TLS compliance. When should I update my ATMs? Now is the best time to update the ATM software on all of your affected machines. Some processors (FIS included) would like to end SSL support as soon as OCTOBER 1 st, 2015! What happens if I don t update my ATM that utilizes direct internet connectivity? Any ATM that isn t TLS compliant after the processor officially ends SSL support will experience communication errors. The only way around this is to install a TLS compatible wireless unit on the ATM, or update the machine s software. How do I know which ATMs are affected? The easiest way to verify if an ATM is affected is to look at PAI Reports. Here s how: OPTION #1: Setup a Custom Terminal Report in PAI Reports A. Go to TASKS Maintenance ATM Terminals , Page 2

3 B. Click on the gear located next to the Terminal List dropdown selection box C. Change the Report Name, check the Reported Software checkbox (located near the bottom of the list), and then click on the Save as New button to save the report , Page 3

4 D. Now the report will contain the software version that is getting reported directly from the ATM. OPTION #2: View the Actual Software Version within Terminal Details A. Access the ATM Terminals report (see Option #1 for more details), then click on the blue Terminal Number B. Scroll down to the Physical Details panel to view the software version within the Processor Reported section , Page 4

5 Do you still have questions? We can help! If you re logged into PAI Reports, simply fill out a contact form for immediate assistance , Page 5