Support Ending for TLS 1.0 and 1.1 Protocols

January 28, 2020

On Mar. 23 CalNet will fully depreciate TLS 1.0/1.1.

On Mar. 23, CalNet will disable TLS 1.0 and 1.1 protocols from being used to access CAS, Shibboleth, CalGroups, CalNet Account Manager, and LDAP. TLS 1.0 and 1.1 are insecure and vulnerable to attacks which risk the integrity and authentication of data sent between client and destination. Disabling these protocols is meant to mitigate these issues, adhere to campus policy, and to protect institutional data and IT resources. 

All major browser-makers - Firefox Mozilla, Google Chrome, Microsoft Edge, Internet Explorer 11, and Apple Safari - are ending support in March for TLS 1.0 and 1.1 protocols.


What this means for end-users 

End users will need to install and use browsers that work with CalNet services. Newer versions have more up to date security settings and can better protect you from attackers.

Android

You can no longer access these services using the stock Android Browser on devices running Android 4.4 or older. If possible, upgrade your Android operating system to a newer version. Alternatively, install and use a newer browser via the Google Play Store – for example, Google Chrome or Mozilla Firefox.

Apple Mac

You can no longer access these services using the Safari web browser, and older versions of Google Chrome or Mozilla Firefox, on Mac OS X 10.10 (Yosemite) or older. We recommend you upgrade to the latest version of macOS or use the latest version of Chrome or Firefox instead of Safari.

Internet Explorer (desktop)

You can no longer access these services using Internet Explorer 8, 9 or 10 on Windows 8 and 7 without making changes to your browser settings. We recommend you install the latest version of Internet Explorer.

iOS Devices (iPhone, iPad)

You can no longer access these services using the Safari mobile browser on Apple devices (iPhone, iPad or iPod touch) with iOS 8.1 or older.

We recommend you update the iOS software to a newer version. Note: older devices may only be able to upgrade to iOS 9 and not beyond. e.g.,  iPad 2, 3 and 1st generation iPad Mini.

Windows Devices (mobile)

You can no longer access these services using IE (Internet Explorer) Mobile version 10 or older on a Windows Phone. We recommend you update your Windows Phone software to a more recent version – either:

  • Windows 10 Mobile which includes the Microsoft Edge browser
  • Windows Phone 8.1, which includes IE Mobile 11