BCC Software Web Services Security Update to Ensure Uninterrupted Access
On August 3rd, 2020 all of BCC Software client server HTTP/HTTPS communication is moving to only supporting HTTPS TLS 1.2.
After August 3rd, 2020 BCC servers will only accept TLS 1.2 HTTPS connections and will reject anything that is using non-SSL or is a lower SSL version (SSL 3.0, TLS 1.0, TLS 1.1).
This change is to ensure client / server communications are using more secure hash algorithms and cipher suites.
ZIPFOURce Web Services
While the systems providing ZIPFOURce Web Service APIs already support HTTP TLS 1.2, they also support lower SSL versions (SSL 3.0, TLS 1.0, TLS 1.1). You must ensure that your software, libraries, underlying OS, and any frameworks you use to connect to ZIPFOURce Web Service are able to communicate over HTTPS TLS 1.2 only as these lower ciphers will be disabled on August 3rd. You can typically do that by using various network/application proxy tools, such as Fiddler or Wireshark. You can also contact our Technical Support team to help validate this for you if you’re uncertain.
In addition, BCC Software created a TLS 1.2 ZIPFOURce Web Service API test service to validate your integrations against. The web address is https://ws-stage.bccsoftware.com and it only accepts TLS 1.2 connections. It functions exactly like the existing ZIPFOURce Web Service APIs, uses the same credentials to authenticate, and consumes real production credits. If your integration works against this test URL, no other action is necessary and you will not be impacted by the switchover. If the connection is refused, you must review the software, libraries, underlying OS, and/or frameworks that are being utilized to connect to ZIPFOURce Web Service and ensure they are updated to versions necessary to communicate over HTTPS TLS 1.2. If you are unsure or need further assistance please reach out to BCC Customer Support.
Important: Please note that https://ws-stage.bccsoftware.com is a temporary test service provided for your convenience to validate your compliance with upcoming changes and should not be used as a permanent web address for ZIPFOURce Web Service. Once your integration is successfully validated please ensure you switch to https://ws.bccsoftware.com web address for ZIPFOURce Web Service APIs. The test URL will be shut down shortly after August 3rd, 2020.
BCC Architect Web Services
Please check to see if your company is using one of the following URLs for Architect Web Services:
HTTP URLs (non-SSL)
http://ws.satorisoftware.com/Architect/US/ZIP/ZIPService.asmx
http://ws.satorisoftware.com/Architect/US/CASS/CASSService.asmx
http://ws.satorisoftware.com/Architect/US/MOVE/MOVEService.asmx
HTTPS URLs (SSL required, but all versions are supported including TLS 1.0, TLS 1.1 and TLS 1.2)
https://ws.satorisoftware.com/Architect/US/MOVE/MOVEService.asmx
If you’re using the HTTPS versions of the URLs, please ensure that the security protocol used is TLS 1.2. You can typically do that by using various network/application proxy tools, such as Fiddler or Wireshark. You can also contact our Technical Support team to validate this for you.
In addition, we are providing three HTTPS URLs that support only version TLS 1.2. These URLs are not accessible via HTTP or HTTPS TLS 1.0/1.1. By testing against them, you can determine whether you will be compliance on August 3, 2020 when these lower versions are disabled.
TEST HTTPS URLs (SSL required, TLS 1.2 version ONLY)
https://ws-stage.satorisoftware.com/Architect/US/ZIP/ZIPService.asmx
https://ws-stage.satorisoftware.com/Architect/US/CASS/CASSService.asmx
https://ws-stage.satorisoftware.com/Architect/US/MOVE/MOVEService.asmx
IMPORTANT: All TEST URLs are fully functional production URLs and will consume Data Services and/or Move Update credits. If you need credits added to your account for testing, please let us know. Shortly after the switchover on August 3, 2020, the TEST HTTPS TLS 1.2 URLs will be disabled. Therefore, after you validate your systems are functioning properly against these test URLs, make sure that you switch back to the HTTPS URLs.
BCC Infuse Web Services
Please check to see if your company is using one of the following URLs for Infuse Web Services:
HTTPS URLs (SSL required, but all versions are supported including TLS 1.0, TLS 1.1 and TLS 1.2)
https://infuse.satorisoftware.com/wsdl/MultiService.2016.08.wsdl
https://infuse.satorisoftware.com/wsdl/MultiService.2014.10.wsdl
https://infuse.satorisoftware.com/wsdl/MultiService.2015.12.wsdl
https://infuse.satorisoftware.com/wsdl/MultiService.2014.02.wsdl
https://infuseiac.satorisoftware.com/wsdl/IntlAddressCorrection.2012.12.wsdl (Transactional)
https://infuse.satorisoftware.com/wsdl/IntlAddressCorrection.2016.08.wsdl (Transactional)
https://infuse.satorisoftware.com/wsdl/IntlAddressCorrectionAsync.2016.08.wsdl (Batch)
If you’re using these URLs, please ensure that they are over TLS 1.2. You can typically do that by using various network/application proxy tools, such as Fiddler or Wireshark. You can also contact our Technical Support team to validate this for you.
In addition, we are providing three HTTPS URLs that support only version TLS 1.2. These URLs are not accessible via HTTPS TLS 1.0/1.1. By testing against them, you can determine whether you will be compliance on August 3, 2020 when these lower versions are disabled.
TEST HTTPS URLs (SSL required, TLS 1.2 version ONLY)
https://infuse-stage.satorisoftware.com/wsdl/MultiService.2016.08.wsdl
https://infuse-stage.satorisoftware.com/wsdl/MultiService.2014.10.wsdl
https://infuse-stage.satorisoftware.com/wsdl/MultiService.2015.12.wsdl
https://infuse-stage.satorisoftware.com/wsdl/MultiService.2014.02.wsdl
https://infuse-stage.satorisoftware.com/IntlAddressCorrection-2016-08.svc (Transactional)
https://infuse-stage.satorisoftware.com/IntlAddressCorrectionAsync.svc (Batch)
IMPORTANT: All TEST URLs are fully functional production URLs and will consume Data Services and/or Move Update credits. If you need credits added to your account for testing, please let us know. Shortly after the switchover on August 3, 2020, the TEST HTTPS TLS 1.2 URLs will be disabled. Therefore, after you validate your systems are functioning properly against these test URLs, make sure that you switch back to the HTTPS URLs.
If you are using any of the following products: BCC Mail ManagerTM, ZIPFOURceTM (non Web Services), BCC TagIt Pro, Integratec, or BCC Bulk Mailer®, please click here for additional information regarding your set-up.
If you need technical assistance, please contact our Technical Support team at 1-800-624-5234. It may be necessary to schedule a meeting with one of our engineers, depending on the complexity of your setup.
Please be prepared to discuss which web service URLs you are currently using and let us know what information or help you need.
To avoid interruption of your BCC Software web services, please make the necessary changes and test your software in advance of the target switchover date – Monday, August 3, 2020.
