TLS Cipher Updates - Production
Scheduled Maintenance Report for Fat Zebra Status Page
Completed
The scheduled maintenance has been completed.
Posted Sep 25, 2022 - 13:00 AEST
Verifying
This change is currently being monitored
Posted Sep 25, 2022 - 10:44 AEST
Scheduled
In line with PCI-DSS requirements we will be updating the supported ciphers for our services, enabling new, high-strength ciphers, and removing ciphers which are no longer considered sufficient for ongoing security.

The new supported ciphers upon completion of this change will be:

- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-RSA-AES256-GCM-SHA384
- AES-128-GCM-SHA256
- AES-256-GCM-SHA384
- CHACHA20-POLY1305-SHA256
- ECDHE-ECDSA-AES128-GCM-SHA256
- ECDHE-ECDSA-AES128-SHA256
- ECDHE-ECDSA-AES128-SHA
- ECDHE-ECDSA-AES256-GCM-SHA384
- ECDHE-ECDSA-CHACHA20-POLY1305
- ECDHE-ECDSA-AES256-SHA384
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-RSA-AES128-SHA256
- ECDHE-RSA-AES256-GCM-SHA384
- ECDHE-RSA-CHACHA20-POLY1305
- ECDHE-RSA-AES256-SHA384

In order to allow for merchants to make changes to their systems we will be scheduling the changes as follows:

- Thursday 25/08/2022 - changes applied to Sandbox environment. Merchants and partners are encouraged to perform testing against Sandbox APIs to avoid any unexpected issues in Production.
- Sunday 25/09/2022 - changes applied to Production environment.

As these changes are transparent to the majority of clients (i.e. there is no downtime expected) we have not defined a fixed time for the changes on the dates listed above.

If merchants experience any issues following the Sandbox changes please contact our support team for assistance. While we do our best to assist merchants and partners it is important to understand that everyone's environments are different, and we will be able to provide general guidance only.

This change will apply to ALL public endpoints, including Gateway, Reseller API, Reseller and Merchant Dashboard and the Hosted Payment Page.
Posted Aug 31, 2022 - 07:51 AEST
This scheduled maintenance affected: Gateway, Gateway: Direct Entries, Dashboard, Hosted Payment Page, and Core Services.