Notification of security changes – disabling of some versions of Cipher Suite on TLS Protocol

Please ensure that the following information is issued to your IT department

Please be advised that to maintain security, the use of some versions of Cipher Suite on TLS Protocol will be discontinued. A list of those that will be discontinued and those we will continue to support are detailed below.

SCHEDULE

28^th February 2022: The A2A Test and Web Training sites will be upgraded.  

21^st March 2022: The Production site will be upgraded.

A2A users should ensure that they check that their system use the supported Cipher Suites.

Web browser users should check that they are using the latest version of their suppliers’ browser and upgrade if necessary. 

DISCONTINUED CIPHER SUITES:

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

TLS_DHE_RSA_WITH_AES_128_CBC_SHA

TLS_DHE_RSA_WITH_AES_256_CBC_SHA

TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

SUPPORTED CIPHER SUITES:

# TLS 1.3

TLS_AES_128_GCM_SHA256 

TLS_AES_256_GCM_SHA384

# TLS 1.2

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

If you need to enable or upgrade your TLS system protocol, please refer to your IT support as Claims Portal are unable to assist you with these tasks.

Regards

Tim Wallis

Chair, Claims Portal Ltd