Update TLS 1.2

September 29, 2021 /

What is Transport Layer Security (TLS)?  

It is customary practice to only connect to internet resources over secure, encrypted sessions. However, an unencrypted session traveling through the internet can be monitored between transit points, and data can be stolen without the sender or recipient of the data knowing the information has been compromised.  

The underlying protocol establishing an encrypted session is called Transport Layer Security (TLS) and is built into all modern web browsers.

Why TLS 1.2?

Current encryption methods rely on complex calculations to encrypt and decrypt the information encryption is designed to protect. As processing power has strengthened in recent years, many encryption protocols have proven to be breakable under the onslaught of thousands of attempts per second. Previous versions of TLS (TLS 1.1 and earlier) have reached a point where the encryption protecting the protocols is vulnerable.

As of early 2021, the minimum required version is now TLS 1.2. All previous versions of TLS have been deprecated or are deemed unsuitable for encrypting internet traffic. Learn more about TLS 1.2 here.

How does TLS 1.2 impact my Vertafore product connections?  

It is our utmost priority to protect your data with the highest security standards. To maintain the industry security standards that keep your data protected, we need to make changes to ensure that we are meeting or exceeding industry standards for encryption of data in transit.

This full deprecation of TLS versions earlier than 1.2 has been anticipated for quite a while, and Vertafore has been strengthening our applications to meet this challenge. As of Wednesday, January 26, 2022, Vertafore is ending formal support for connections not meeting TLS 1.2.

This change may impact how some customers conduct business, and your agency may not be ready to make the change on this date. We will work with customers to ensure all Vertafore applications will continue to work while instituting other mitigating controls and working with you to meet TLS 1.2 implementation within a reasonable remediation timeline. If you have questions, please contact your Vertafore Account Manager or Customer Support.