Blog - Insightful Resources For Service Providers | Rev.io

Maintaining Security Through TLS Protocol 1.2 Or Later

Written by Rev.io | May 8, 2018 4:00:00 AM

Rev.io clients use HTTPS to securely connect with Rev.io’s IoT and telecommunications billing system, API, Agent Portal, and Customer Portal (or BillCenter).

We use the Transport Layer Security (TLS) protocol to encrypt these connections. To ensure the security of our systems, and maintain our compliance with the PCI Data Security Standard (PCI DSS) for safeguarding payment data, Rev.io is updating its product suite to require a minimum of version 1.2 of TLS for all HTTPS connections.

Support for TLS versions 1.0 and 1.1 is being deprecated on June 14, 2018.

As a result, anyone attempting to connect to Rev.io products using unsupported browser versions will be unable to do so.

To continue using Rev.io’s telecom billing products, you will need to upgrade to a more modern browser with support for TLS 1.2 or later. For applications integrating with Rev.io products, all HTTPS and API connections will require a minimum connection strength of TLS 1.2 or later.

To help our clients and end-users prepare for this change, we’ve come up with some FAQs and we’re excited to share these with you here!

1. what does this mean?

Rev.io will stop accepting TLS based HTTPS connections made using TLS versions 1.0 and 1.1 beginning June 14, 2018. As a result, clients and applications attempting to connect with older versions of TLS will not be able to establish a secure connection and will be unable to access Rev.io products.

After deprecation, Rev.io will no longer address bugs and minor issues specific to connections supporting TLS versions 1.0 and 1.1. We will continue to resolve any major breakage in functionality until the deprecation date. After deprecation, Rev.io will also no longer provide support for connections supporting TLS versions 1.0 and 1.1.

After the deprecation date, if you are connecting using TLS versions 1.0 and 1.1, you will fail to establish a connection and will be unable to access Rev.io products.

2. which rev.io products will be impacted?

This change applies to Rev.io’s IoT and telecommunications billing system, API, Agent Portal, and Customer Portal (or BillCenter).

3. why is rev.io removing this?

The PCI Council has mandated that support for version 1.0 of the TLS cryptographic standard should be deprecated by June 30, 2018 for companies to stay compliant with the PCI Data Security Standard (PCI DSS).

Rev.io’s mission is to keep clients ahead of their competition and grow revenue efficiently. As part of this promise, we’re maintaining the latest security standards for our usage-rating and telecommunications billing system with this TLS change.

4. am i affected?

All Rev.io products are impacted by this change, including Rev.io’s IoT and telecommunications billing system, API, Agent Portal, and Customer Portal (or BillCenter).

Rev.io Products & Solutions

IoT & Telecommunications Billing Platform

  • Your Rev.io site (clidentcode.rev.io) will no longer be accessible from any browser or device that does not support TLS 1.2 or higher after the cutoff date. This means you will not be able to access your full suite of Rev.io functionality including billing, ticketing, and/ or reporting.

API

  • For applications integrating with Rev.io, all API connections will require a minimum connection strength of TLS 1.2 or later. If your API connection is not updated to meet this minimum security standard, the connection will not succeed and your application will not be able to connect to Rev.io.

Agent Portal

  • After the cutoff date, your Agent Portal site (clientcode.agentclick.com) will no longer be accessible from any browser or device that does not support TLS 1.2 or higher. This means that your agents will not be able to access any Agent Portal functionality if their browser or device does not meet the minimum security requirements.
  • We recommend reaching out to your Agents directly to communicate this change as well as posting a news item or alert to the Agent Portal from your Rev.io site. If you need assistance completing this, please feel free to contact our Client Success Team!

Customer Portal (or BillCenter)

  • After the cutoff date, your Customer Portal site (clientcode.billcenter.net) will no longer be accessible from any browser or device that does not support TLS 1.2 or higher. This means that your customers will not be able to access any Customer Portal functionality if their browser or device does not meet the minimum security requirements.
  • We recommend you reach out to your Customers directly to communicate this change as well as posting a news item or alert to the Customer Portal from your Rev.io site. If you need assistance completing this, please feel free to contact our Client Success Team!

5. What do I need to do?

For you: be sure that you are running on a modern browser, such as Internet Explorer 11, Mozilla Firefox 27, Google Chrome 30, or Apple Safari 7 or newer. If you are not using one of these browser versions or newer, you will need to update to at least one of these versions.

For your agents: be sure that they are running on a modern browser, such as Internet Explorer 11, Mozilla Firefox 27, Google Chrome 30, or Apple Safari 7 or newer. If any of your agents are not using one of these browser versions or newer, they will need to update to at least one of these versions.

For your customers: know that they will be able unable to connect to Rev.io if they are using older browsers. To continue to use the products, they will need to be using a modern browser, such as Internet Explorer 11, Mozilla Firefox 27, Google Chrome 30, or Apple Safari 7 or newer. Mobile versions of Rev.io products will also fail to connect securely on Android OS version 4.1 and below, or the Android Browser on Android 4.4.4 and below. Customers with iOS devices prior to iOS 5.1 will also be unable to connect to Rev.io securely after the deprecation date. Customers should update the version of mobile operating systems to gain support for TLS 1.2 or use a more modern browser with support for TLS 1.2.

6. what browsers can i use?

The minimum browser versions include browsers such as Internet Explorer 11, Mozilla Firefox 27, Google Chrome 30 or Apple Safari 7. iOS 5.1 and Android 5 Lollipop or later will be required to connect to the mobile web versions of the products.

7. What happens if I don’t migrate before the removal date?

You will be unable to securely access the Rev.io cloud billing management products beginning June 14, 2018.

8. WHO SHOULD I CONTACT IF I NEED HELP OR HAVE QUESTIONS?

For more information about Rev.io or if you have specific questions about how this change will impact our IoT and telecommunications billing system, please contact our Client Success Team!