Good Morning
Further to our Community Forum postings last year, to improve our security posture with MYOB Advanced integrations we will be deprecating the ability to integrate (Call using HTTPS) using TLS versions 1.0 and 1.1.
All integrations will be required to use TLS 1.2 or higher (TLS 1.3 is the new gold standard).
This is in line with security best practices and is a change being undertaken in the first half of 2020 by all major browsers and Microsoft.
https://www.zdnet.com/article/chrome-edge-ie-firefox-and-safari-to-disable-tls-1-0-and-tls-1-1-in-20...
https://docs.microsoft.com/en-us/dotnet/framework/network-programming/tls
https://docs.microsoft.com/en-us/security/solving-tls1-problem
What does this mean?
If you have custom integration software using TLS 1.0 or 1.1, after the deprecation date they will cease to work ! For example software calling the Advanced API’s or GI’s via OData
What do I need to do?
Check your integration code for hard coded TLS versions and remove it. Allow the operating system to select the best and most up to date TLS version Test your integrations against sandboxed systems. We will be deprecating the TLS versions for sandbox environments to allow this testing Advise us when you believe you have completed your relevant changes and testing and are ready for deprecation
What will we do?
We will monitor our request logs for usage of the TLS versions and contact the relevant Partners and ISV’s to request the usage is updated We will NOT deprecate the TLS version until we get clear indication from the logs that usage of the insecure protocols have ceased but we must act prior to general deprecation to ensure we remain security aligned Please ensure you are compliant as of 20 November 2021 to avoid any potential disruptions to service.
Mark Trumper
ERP and Payroll Support Manager - Enterprise
