TLS 1.2 FAQ

Can I get a copy of the original announcement?

Here is a PDF of original announcement. PAN Platform TLS 1.2 Announcement

 

What is TLS?

TLS stands for “Transport Layer Security.”  TLS is a protocol that provides privacy and data integrity between two communicating applications.  It is the most widely deployed security protocol used today, and is used for web browsers and other applications that require data to be securely exchanged over a network.  TLS ensures that a connection to a remote endpoint is the intended endpoint through encryption and endpoint identity verification.  The versions of TLS, to date, are TLS 1.0, 1.1 and 1.2.

 

Why is this happening?

PAN is focused on continually helping our customers improve their security by using the latest security protocols.  Beginning March 15, 2018, PAN will require TLS 1.2 and later encryption protocol in an effort to maintain the highest security standards and promote the safety of customer data.

 

How does this affect me?

For most users, this change will not impact your access to our systems.  However, if you are using an older operating system, such as Windows XP, or are using a non-default browser configuration, you might not be able to access our services after this change.  Users of the PAN Partner Integration services should test their connectivity as well.

 

How can I test my system?

To assist with verifying your system compatibility with these changes, we have implemented a test website at https://connectivtytest.vitapowered.com  Additionally, to allow our integration partners adequate time to test, we will be migrating our user acceptance test (UAT) environment to TLS 1.2 on February 15, 2018.

 

Browser Compatibility

Browser Compatibility Notes
Microsoft Internet Explorer (IE)
Review the Enabling TLS 1.2 for IE section below for more details.
Desktop IE version 11 Compatible with TLS 1.2 or higher by default
If you see the “Stronger security is required” error message, you may need to turn off the TLS 1.0 setting in the Internet Options | Advanced Settings list.
Desktop IE versions 8, 9, and 10 Compatible only when running Windows 7 or newer, but not by default. Review the Enabling TLS 1.2 for IE section below for more details.
Desktop IE versions 7 and below Not compatible with TLS 1.2 or higher encryption.
Microsoft Edge Compatible with TLS 1.2 or higher by default.
Mozilla Firefox
Compatible with the most versions, regardless of operating system.
Firefox 27 and higher Compatible with TLS 1.2 or higher by default.
Firefox 24 to 26 Compatible, but not by default.
Use about:config to enable TLS 1.2 by updating the security.tls.version.max config value to 3 for TLS 1.2.
Firefox 23 and below Not compatible with TLS 1.1 or higher encryption.
Google Chrome
Compatible with the most recent versions, regardless of operating system.
Google Chrome 38 and higher Compatible with TLS 1.2 or higher by default.
Google Chrome 30 to 37 Compatible when running on Windows XP SP3, Vista, or newer (desktop), OS X 10.6 (Snow Leopard) or newer (desktop), or Android 2.3 (Gingerbread) or newer (mobile).
Google Chrome 29 and below Not compatible with TLS 1.2 or higher encryption.
Google Android OS Browser
Android 5.0 (Lollipop) and higher Compatible with TLS 1.2 or higher by default.
Android 4.1 (Jelly Bean) to 4.4.4 May be compatible with TLS 1.2 or higher. Some devices with Android 4.4.x may not support TLS 1.2 or higher.  Support not enabled by default
Android 4.0.4 (Ice Cream) and below Not compatible with TLS 1.2 or higher encryption.
Apple Safari
Desktop Safari versions 7 and higher for OS X 10.9 (Maverick) and higher Compatible with TLS 1.2 or higher by default.
Desktop Safari versions 6 and below for OS X 10.8 (Mountain Lion) and below Not compatible with TLS 1.2 or higher encryption.
Mobile Safari versions 5 and higher for iOS 5 and higher Compatible with TLS 1.2 or higher by default.
Mobile Safari for iOS 4 and below Not compatible with TLS 1.2 or higher encryption.

* Note: Windows XP and MAC OS X 10.8 (Mountain Lion) or earlier Operating Systems do not support TLS 1.2, an upgrade will be necessary.

 

Enabling TLS 1.2 for IE versions 8.0 or higher

In the Internet Options window,

  • Click on the Advanced tab at the top of the window.
  • Scroll down to the end of the list and click in the square check boxes next to “Use TLS 1.1” and “Use TLS 1.2” if they don’t already have a check mark in them.
  • When complete, the screen should resemble the following, where “Use TLS 1.1” and “Use TLS 1.2” both have check marks in the check boxes next to them while “Use SSL 2.0”, “Use SSL 3.0”, and “Use TLS 1.0” do not have check marks in the check boxes next to them.
  • Press the OK button to save this change.