October 2016 Request Professional Edition Admin Summary
Request
No New Features This Month
Administration
File Transfer Security Update
During the month of October 2016, Concur Operations will apply a routine security update to our File Transfer infrastructure (SecureTransport). This is part of our ongoing commitment to securing our customers’ data and meeting the audited security requirements of the "Concur Trust Platform". As part of this update, only TLS v1.1 and TLS v1.2 will be supported for FTP/S (FTP-SSL) and HTTPS protocols. New ciphers will be in place for EMEA (st-eu.concursolutions.com) on 8 Oct, and US migration (st.concursolutions.com) on 22 Oct. The expected time of each modification is 10 AM Eastern time.
For more information on TLS and cipher support, refer to the File Transfer User Guide (English only).
Concur has created a SecureTransport staging environment that US and EMEA customers can test against. The URL is st-staging.concursolutions.com. The testing is for connectivity only. It’s possible to upload files in this environment, however the files will not be processed. Protocols available in SecureTransport staging environment are: HTTPS, SSH (SCP, SFTP) and FTP/S.
**Coming Soon** Support for TLS v 1.0 Encryption Protocol to End March of 2017
Concur announces an End of Support (March 2017) cycle for version 1.0 of the TLS encryption protocol, continuing support for the more secure 1.1 and 1.2 versions of TLS. As background, the TLS protocol allows secure back and forth communications between a phone or computer and a cloud-based service. Note that, since less than 1% of Concur users are logging in to Concur Solutions using browsers or phones limited to version 1.0, a very small number of users are affected by this support discontinuation.
Business Purpose / Client Benefit: Concur is taking this step after careful consideration of both the client’s security and ease of upgrade to the newer, more secure 1.1 and 1.2 versions of TLS. This end of life plan for TLS v 1.0 ensures our clients are communicating with Concur services in a safe and secure manner using TLS v. 1.1 and newer.
More Information: Additional information about this change for TLS support will be included in upcoming release notes included in monthly service releases.