Effective September 30th 2022

The Payment Card Industry Security Standards Council (PCI SSC) mandate transition from all versions of SSL, TLS 1.0 and TLS 1.1 communication protocols to a more secure version of TLS (currently TLS v1.2).

Plug and Pay has established a compliance deadline for all transaction traffic to update to use strong TLS 1.2 ciphers by September 30th 2022.

Merchants not running modern software or have not upgraded by this date may experience service outages and will not be able to process transactions until an upgrade to strong TLS 1.2 ciphers is performed.

If any errors are returned indicating there was no connection, or no response is returned, this would indicate a connection problem.

Please contact support@plugnpay.com, so we may work with you &/or your staff on the matter.

Addition Information:

To maintain our systems security, only these TLS 1.2 ciphers will be permitted on Sept 30th, 2022

• TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
• TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
• DHE-RSA-AES128-GCM-SHA256 *
• DHE-RSA-AES256-GCM-SHA384 *

* May require specialized patching to manually activate/apply in Windows Server 2012 R2 and Windows 8.1

• To see which versions of TLS your build of Windows can support, please click here for related information.

Potentially some Unix/Linux servers running older versions of OpenSSL &/or other related encryption suites could also be affected, if said encryption suite is not kept current.

Customer Access To Billing Pages:

Customers who can't reach our gateway hosted billing pages may need to upgrade to a more current operating system.
Minimum operating system requirements would be Windows 10+, MacOS 10.8+, iOS 5.0+ or Android 5.0+.
Anything older would likely not be able to connect to us, as it's lacking the ability to utilize strong enough encryption methods to connect to the HTTPS URL.

Vermont System Clients:

Vermont Systems clients must on/after Sept 30th, must have the domain name within the URL you're calling as 'pay1.plugnpay.com'.

RecTrac 10.3

• Go into one of the PlugNPay Credit card devices used for sales and adjust the URL. Logout and test.
• You would go into Management, System Management and sort the datagrid to display the credit card profiles.
• Update the appropriate WebExpress profile(s).

RecTrac 3.1

• You would go into Management, System Management, Profile Management (or search for Profile Management in the search bar), and sort the datagrid to display the credit card profiles.
• Update the appropriate WebExpress profile(s).

If you are sure connections are failing, the options are:

•   • Option 1 - migrate to a newer version of Windows server that supports stronger TLS 1.2 ciphers as shown above.
•   • Option 2 - setup a proxy and route your Windows Server R2 servers traffic through it. The proxy will automatically bump up the TLS security to use a supported cipher, when it connects to our gateway. This will allow more time until you can upgrade properly.