Please Check Your Browser Version and Security Settings for New PCI Compliance

Transcription

1 Please Check Your Browser Version and Security Settings for New PCI Compliance New Online Security Requirements and web encryption to ensure PCI Compliance is being rolled out globally to further protect online data. For many of you, this will not be an issue if you have already upgraded your security settings. For some, this could impact your access to our website. Beginning June 9, 2018, our security at and shopatwarehousedirect.com websites will be upgraded to continue to keep your shopping experience secure and PCI compliant. To ensure your continued shopping experience, you and others in your organization will need to make sure you have upgraded your web browser to the most recent version, using TLS 1.2 data encryption. As of June 9, 2018, please make sure your browser security settings are updated and using TLS 1.2. All browsers using TLS 1.0 after June 9, 2018 will not be able to access shopatwarehousedirect.com. Below are instructions and additional information on how to check your settings. As always, we are committed to your experience at Warehouse Direct. If you need additional assistance, please contact your customer service representative at or and we will be more than happy to help you. What is TLS? Transport Layer Security (TLS) is a cryptographic protocol designed for communication security. TLS is used in many applications, including browsers. Why do I need to check my settings? On a global level, to remain PCI compliant, monthly scans must be performed by a Qualified Security Assessor (QSA). These scans check many different parts of the software, including hardware, security, etc. Scans are now detecting support for TLS1.0 and if detected, support for TLS1.0 means an immediate failure. Effective June 9, 2018, any system supporting TLS 1.0 will no longer be able to utilize shopatwarehousedirect.com.

2 How do I check? 1. Check your TLS security settings in your browser and make sure you aren t using a browser with only TLS 1.0 enabled and you are using TLS 1.2. Instructions for how to do this are below in the section titled Enabling TLS 1.2 on web browsers. 2. If you check your settings and TLS 1.2 is not available to select, you will most likely need to upgrade your browser. Please see instructions on how to do this in the section below titled Upgrading Your Browser. 3. Once you have upgraded, please return to step 1 to make the correct TLS 1.2 selection. 4. If your browser is controlled via a Network Program, please contact your network administrator. If you are on XP, you must be using the latest version of Firefox. If you are on Vista, you must be using the latest version of Firefox or Chrome. If you are using Firefox or Chrome, make sure your browser is updated to the latest version. We recommend updating any time a new version is available. If you are using IE 8-10 on Windows 7 or 8, make sure TLS1.2 is enabled under Advanced Settings. If you are using IE 9-11, check your settings to ensure TLS1.0 isn t checked and TLS1.2 is checked. Enabling TLS 1.2 on web browsers Please note: Currently Windows XP and Vista can only upgrade to Internet Explorer 8, which does not support TLS 1.2. However, users of these operating systems can still install a newer version of Firefox, which does support TLS 1.2. Chrome no longer supports Windows XP as of April Description To enable TLS 1.2 protocol on web browsers, see the list of browsers and their accompanying instructions. Microsoft Internet Explorer Google Chrome Mozilla Firefox Opera Apple Safari 2

3 Microsoft Internet Explorer 1. Open Internet Explorer 2. From the menu bar, click Tools > Internet Options > Advanced tab 3. Scroll down to Security category, manually check the option box for Use TLS 1.1 and Use TLS If TLS 1.0 is checked, be sure to uncheck it. 5. Click OK 6. Close your browser and restart Internet Explorer 3

4 Google Chrome 1. Open Google Chrome 2. Click Alt F and select Settings 3. Scroll down and select Advanced (sometimes small text at the bottom of the page) Scroll down to the System or (Network in some versions) section and click on Open proxy settings Select the Advanced tab 6. Scroll down to Security category, manually check the option box for Use TLS 1.1 and Use TLS Click OK 8. Close your browser and restart Google Chrome 4

5 Mozilla Firefox 1. Open Firefox 2. In the address bar, type about:config and press Enter 3. Scroll down, find and double-click the entry for security.tls.version.min 4. Set the integer value to 2 so that the minimum version used is 1.1 and click ok 5. Double-click the entry for security.tls.version.max 6. Set the integer value to 3 so that tls 1.2 is available and click ok 7. Close your browser and restart Mozilla Firefox Opera 1. Open Opera 2. Click Ctrl plus F12 3. Scroll down to the Network section and click on Change proxy settings Select the Advanced tab 5. Scroll down to Security category, manually check the option box for Use TLS 1.1 and Use TLS 1.2 5

6 6. Click OK 7. Close your browser and restart Opera Apple Safari There are no options for enabling SSL protocols. If you are using Safari version 7 or greater, TLS 1.1 and TLS 1.2 are automatically enabled. 6

7 Upgrading Your Browser Please note: Currently Windows XP and Vista can only upgrade to Internet Explorer 8, which does not support TLS 1.2. However, users of these operating systems can still install a newer version of Firefox, which does support TLS 1.2. Chrome no longer supports Windows XP as of April Description To upgrade your browser to be able to enable TLS 1.2 protocol on web browsers, see the list of browsers and their accompanying instructions. Microsoft Internet Explorer If you are running Windows 8.0, you will not be able to update to Internet Explorer 11. Windows 8.0 has Internet Explorer 10 which has TLS 1.2 available. For Windows 7, 8.1 and Windows Go to 2. Select Your Windows Version from the drop down box. Next, the latest IE update for your Operating System will appear as a download link. You will choose the download link for either 32-bit or 64-bit version. (If you are not sure which version you have, see the section below entitled, Do I have a 32 or 64-bit operating system). 7

8 Do I have a 32 or 64-bit operating system? From your start button, use the search field and type in version. An option that says show which operating version your system is running should be one of the choices available. When you click on that item, a window similar to the image below will appear. One of the System Items listed will be the System Type which is either 32 or 64-bit. Google Chrome 1. Open Google Chrome 2. Select the 3 dots on the upper right corner. 8

9 3. Select Help from the pop up box. 4. Select About Google Chrome 5. This screen will pop up and will automatically update. You may need to relaunch Chrome for the update to go into effect. 9

10 Mozilla Firefox 1. Open Firefox 2. Click the menu button, click Help and select About Firefox. The About Firefox window will appear. The version number is listed underneath the Firefox name. Note: Opening the About Firefox window will, by default, start an update check. If an updated version of Firefox is available, it will be automatically downloaded. For more information, see Update Firefox to the latest version at US/kb/update-firefox-latest-version. 3. Alternatively, click the menu button, click Help and select Troubleshooting Information. A page with the address about:support will appear in a new tab. Your Firefox version is listed underneath the Application Basics section of the page. For more information, see Use the Troubleshooting Information page to help fix Firefox issues at US/kb/use-troubleshooting-information-page-fix-firefox. 10