|
Date: |
August 22, 2019 |
|
|
|
|
To: |
First Data Retail, Wholesale, Full Service Providers (FSP) Clients |
|
|
|
|
Platform: |
Omaha |
|
|
|
|
Notification Type: |
Update |
|
|
|
|
Regarding: |
Datawire Root Certificate Authority Migration Update 3 |
|
|
|
Overview:
As previously communicated, in accordance with industry changes, Datawire is migrating to DigiCert Root Certificate Authority’s for all POS devices.
Datawire has discontinued support of all other Root Certificate Authority’s on August 1, 2019.
Update #3:
During the 1st scheduled burst for the Datawire Classic network that took place on August 20, 2019, it was reported that a subset of Merchants using the FD Unity application, with the most current version, were impacted by the burst upgrade. Fiserv is currently researching these examples as to why these Merchants were impacted. As a result, the next scheduled burst for the Classic network on August 27, 2019 will occur as scheduled, however Merchants using the FD Unity application will be excluded from the burst upgrade, until our research regarding impact is completed.
Be Informed:
In compliance with CA/B (Certificate Authority/Browser) forum mandate to remove support for all Symantec/Verisign certificates, Datawire will be migrating to DigiCert Root CA’s in our production environments over the next few months.
Datawire will perform a full upgrade to support only DigiCert Root CA’s for 30 minute intervals. Merchants who do not have the following Root CA’s installed will not be able to process transactions using the Datawire Secure Transport service during these burst updates.
Merchants should proactively update their POS devices/applications with the new DigiCert Root CAs by downloading and installing the following Root CAs from the DigiCert site below and install them in the Root store of their POS devices or downloading their POS terminals with the latest version of the POS application.
DigiCert Global Root CA
Country = US
Organization = DigiCert Inc
Organizational Unit = www.digicert.com
Common Name = DigiCert Global Root CA
Serial Number: 08:3b:e0:56:90:42:46:b1:a1:75:6a:c9:59:91:c7:4a
Valid From: Nov 10 00:00:00 2006 GMT
Valid to: ‎Nov 10 00:00:00 2031 GMT
Certificate SHA1 Fingerprint: ‎ A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
Key Size: RSA(2048Bits)
Signature Algorithm: sha1WithRSAEncryption
DigiCert Global Root G2
Country = US
Organization = DigiCert Inc
Organizational Unit = www.digicert.com
Common Name = DigiCert Global Root G2
Serial Number: 03:3a:f1:e6:a7:11:a9:a0:bb:28:64:b1:1d:09:fa:e5
Valid From: Thursday, ‎August ‎01, ‎2013 7:00:00 AM
Valid to: ‎Friday, ‎January ‎15, ‎2038 7:00:00 AM
Certificate SHA1 Fingerprint: ‎df 3c 24 f9 bf d6 66 76 1b 26 80 73 fe 06 d1 cc 8d 4f 82 a4
Key Size: RSA(2048Bits)
Signature Algorithm: sha256WithRSAEncryption
The above Root CAs can be downloaded from https://www.digicert.com/digicert-root-certificates.htm
Full Schedule for Bursts:
|
Date |
Planned Event |
Time |
|
Tuesday, August 20, 2019 |
Burst Classic Network |
10:00 a.m. to 10:30 a.m. EST |
|
Thursday, August 22, 2019 |
Burst EFS Network |
10:00 a.m. to 10:30 a.m. EST |
|
Tuesday, August 27, 2019 |
Burst Classic Network |
2:00 p.m. to 2:30 p.m. EST |
|
Thursday, August 29, 2019 |
Burst EFS Network |
2:00 p.m. to 2:30 p.m. EST |
|
Tuesday, September 3, 2019 |
Burst Classic Network |
6:00 p.m. to 6:30 p.m. EST |
|
Thursday, September 5, 2019 |
Burst EFS Network |
6:00 p.m. to 6:30 p.m. EST |
|
Tuesday, September 10, 2019 |
Burst Classic Network |
10:00 a.m. to 10:30 a.m. EST |
|
Thursday, September 12, 2019 |
Burst EFS Network |
10:00 a.m. to 10:30 a.m. EST |
|
Tuesday, September 17, 2019 |
Burst Classic Network |
2:00 p.m. to 2:30 p.m. EST |
|
Thursday, September 19, 2019 |
Burst EFS Network |
2:00 p.m. to 2:30 p.m. EST |
|
Tuesday, September 24, 2019 |
Burst Classic Network |
6:00 p.m. to 6:30 p.m. EST |
|
Thursday, September 26, 2019 |
Burst EFS Network |
6:00 p.m. to 6:30 p.m. EST |
|
Tuesday, October 1, 2019 |
Burst Classic Network |
10:00 a.m. to 10:30 a.m. EST |
|
Thursday, October 3, 2019 |
Burst EFS Network |
10:00 a.m. to 10:30 a.m. EST |
|
Tuesday, October 8, 2019 |
Burst Classic Network |
2:00 p.m. to 2:30 p.m. EST |
|
Thursday, October 10, 2019 |
Burst EFS Network |
2:00 p.m. to 2:30 p.m. EST |
|
Tuesday, October 15, 2019 |
Burst Classic Network |
6:00 p.m. to 6:30 p.m. EST |
|
Thursday, October 17, 2019 |
Burst EFS Network |
6:00 p.m. to 6:30 p.m. EST |
|
Tuesday, October 22, 2019 |
Burst Classic Network |
10:00 a.m. to 10:30 a.m. EST |
|
Thursday, October 24, 2019 |
Burst EFS Network |
10:00 a.m. to 10:30 a.m. EST |
|
Tuesday, October 29, 2019 |
Burst Classic Network |
2:00 p.m. to 2:30 p.m. EST |
|
Thursday, October 31, 2019 |
Burst EFS Network |
2:00 p.m. to 2:30 p.m. EST |
|
Tuesday, November 5, 2019 |
Burst Classic Network |
6:00 p.m. to 6:30 p.m. EST |
|
Thursday, November 7, 2019 |
Burst EFS Network |
6:00 p.m. to 6:30 p.m. EST |
In support of this effort, Datawire required all new certifications as of January 25, 2018 to contain the DigiCert Root Certificate Authority. Merchants using older versions of POS applications or devices may need to obtain a new application download or revision to their application, in order to receive the required DigiCert Root Certificate Authority.
Take Action:
First Data strongly recommends Clients begin migration efforts immediately. Merchants processing on Datawire that have not upgraded by August 1, 2019 will experience service outages and will not be able to process transactions until the DigiCert Root Certificate Authority has been loaded to their POS device.
The FD terminal family has been updated with the DigiCert Root Certificate Authority in the Unity applications, starting with revision 01.09.01 in February 2018. Therefore, any POS device that contains that revision or higher already contains the required certificate and no action is necessary. Terminals with previous applications/versions will require an update to the latest application and revision.
The only exception to this is the 760FD130 application on the Nashville platform for the FD-130 terminal. This application has been updated with the DigiCert Root Certificate Authority on May 7, 2019 and is available for download.
Any Vx520 terminal processing via IP on the Omaha platform will be required to update the Comm Server application running on the device. The availability of the Comm Server application version that will support the DigiCert Root Certificate Authority has not yet been determined and additional details will be provided when they are available.
The new CommServer application version for the Verifone Vx520 terminals that supports the DigiCert Root Certificate Authority is also available.
All Vx520 terminals on Omaha, with a Comm Server application version prior to 544, will need to have the updated file loaded on to the device. The steps to update the device can be accessed the following ways:
· Firstdataclients.com - https://www.firstdataclients.com/green/merchant/onlineforms/FDC_POSHelpdesk/pos_helpdesk.html
· First Data Help Desk VRU 1-800-228-0210. An option has been added that will walk through the update steps
· Step by Step video under Client Alerts on www.firstdata.com –
https://www.firstdata.com/en_us/customer-center/client-alerts.html
Any terminal that is at a “No Download/No Replacement” or “End of Help Desk Support” lifecycle status, will not have updated applications available to support the DigiCert Root Certificate Authority. Merchants with terminals in these lifecycle statuses should be encouraged to upgrade their equipment for continued IP processing.
Merchants using 3rd party POS devices (Class B/B+ terminals, gateways, softwares, ISV’s, etc.) will need to reach out to the vendor to confirm their product’s readiness to support the DigiCert Root Certificate Authority and whether any action is needed for their POS device.
Note: Impact reporting can be obtained by contacting your assigned Client Service Analyst (CSA), and updated reporting can be obtained weekly per Client request. In some situations (Datawire EFS), Datawire has no visibility into the POS device to determine which Root Certificate Authority is enabled, which limits the ability to determine which Merchants are processing with compliant devices. In this situation, impact reporting is available with all Datawire Merchants active in 2018, which could include Merchants that are already compliant.
Should you have any questions regarding this Flash Communication, please open a ServiceCenter ticket via the client website www.firstdataclients.com, or contact the ISO Solutions Service Team at 1-800-337-1222, press 2 for Merchant ISO/FSP support, then press option 1 for North or Memphis Platform support OR option 2 for Omaha Platform support.
The information contained in this Alert is provided as a courtesy and is for general informational purposes only. This Alert is not intended to be a complete description of all applicable policies and procedures. The matters referenced in this Alert are subject to change without notice. Individual circumstances may vary. The information contained in this Alert may include, among other things, a compilation of documents received from third parties. First Data shall not be responsible for any inaccurate or incomplete information.
© 2019 First Data Corporation. All Rights Reserved. All trademarks, service marks and trade names referenced in this material are the property of their respective owners. This Alert may not be copied, reproduced or distributed in any manner whatsoever without the express written consent of First Data Corporation.
The information in this message may be proprietary and/or confidential, and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify First Data immediately by replying to this message and deleting it from your computer.
Last Updated: 08/23/2019 11:03