Concerning the deadlines shown on Upcoming TLS 1.2 Express and MercuryPay Platform Changes : I see no explicit mention for the Element Hosted Payments platform. Can you provide the deadline dates for HP (not triPOS Direct) please?
Concerning the deadlines shown on Upcoming TLS 1.2 Express and MercuryPay Platform Changes : I see no explicit mention for the Element Hosted Payments platform. Can you provide the deadline dates for HP (not triPOS Direct) please?
Hi Steven,
Hosted Payments runs on Express so the impact dates are in relation to the reference of the May 2nd production rollout. You can test your Hosted Payments integration in our CERT environment to confirm what changes if any need to be implemented down to your clients.
You can contact certificationteam@vantiv.com for assistance to your solution.
Regards,
Chris
Hi Chris
Just to be 100% clear – on May 2, is it the case with transactions against the Express platform that:
1. They may use TLS1.2, or
2. They must use TLS1.2
If (2) will transactions using, say, TLS 1.0 be declined after that date? And if so, what will the error be?
Thanks,
Steve Van Zoeren
Steven,
Yes to #2, merchants MUST ONLY communicate to Express using TLS 1.2. If they communicate to the platform with a weaker protocol they will not be able to process.
I cannot provide a specific error message, because the request will fail before an authorization is attempted. Depending on where the handshake in protocol happens the errors will be different. For example, a browser sending TLS 1.1 will have a different error then a payment application (i.e. using older version of .NET framework) sending TLS 1.1 older.
jeff.gross@vantiv.com can you provide any examples of errors that have come to the attention of integration team?
Regards,
Chris
Errors that may be returned at a TLS connectivity level should indicate that a connection to our host was not possible. Your solution may receive errors such as "remote host was forcibly closed", "secure connection could not be obtained", or something similar. But because these requests aren't actually making it into the Express environment, how they are bubbled up through the software development environment you utilize may vary.
Hi Steven,
Hosted Payments runs on Express so the impact dates are in relation to the reference of the May 2nd production rollout. You can test your Hosted Payments integration in our CERT environment to confirm what changes if any need to be implemented down to your clients.
You can contact certificationteam@vantiv.com for assistance to your solution.
Regards,
Chris