[Wactclc-alma] FW: Deprecation of TLS 1.0 /1.1 for Ex Libris API - February data and call to action

Tue Mar 9 09:33:04 PST 2021

Good morning,

Did anyone else receive this email?

I assume Pierce College got it because we were using an API for our new books list. (It’s not currently in use because our purchasing and processing of new books has slowed since last March.)

Are there any other APIs I’m not thinking of that others are using?

See y’all soon,
Lesley

From: Ex Libris <support at exlibrisgroup.com>
Sent: Tuesday, March 9, 2021 3:12 AM
To: Lesley Caldwell <LCaldwell at pierce.ctc.edu>
Subject: Deprecation of TLS 1.0 /1.1 for Ex Libris API - February data and call to action

CAUTION: This email originated from outside Pierce College. Do not click links or open attachments unless you have confirmed this is an authentic message from sender and know the content is safe. If you are unsure, contact the Help Desk at 253-964-6373 or email Helpdesk at pierce.ctc.edu<mailto:Helpdesk at pierce.ctc.edu>
[http://r20.rs6.net/on.jsp?ca=0312e9bd-6d4d-4ee9-85f7-e7676b04cc0e&a=1110781875888&c=bfb426e0-5cdd-11e4-bb55-d4ae5275505f&ch=bfd48020-5cdd-11e4-bb67-d4ae5275505f]

[https://files.constantcontact.com/0b652cf9201/4e017dc0-2782-45d1-a3a1-af24655ab50c.jpg]<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk0lCqoSXTCmpTh67w0-i2RONwDrPMJjDHcSALyxVQvRGsWy6OLLfDs66JIqjag_xr_wshvwvVdmc8q_75BloJRRhmz90TqXrGA==&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==>

Dear ExLibris customer,
You are receiving this mail as an active system admin user in Alma or as an Alma mailing list subscriber.

TLS is a cryptographic protocol that provides authentication and data encryption between different endpoints (for example, the user's desktop and the application server). Various vulnerabilities (such as POODLE and DROWN) have been found in TLS versions 1.0 and 1.1 in recent years.
Ex Libris wants to avoid security vulnerabilities and to align with industry standards. Ex Libris already removed its support for TLS 1.0 and 1.1 in Alma production environments and will support only TLS 1.2 or later for web access.

We are now deprecating the TLS 1.0 and TLS 1.1 support for Ex Libris API.
A gradual deprecation process will start at the end of April 2021.

We have identified that during February 2021, your institution had local applications calling Ex Libris APIs using TLS 1.0 or 1.1.
To ensure that your local applications continue to function, you must identify the relevant applications and upgrade them to work with TLS 1.2.
To retrieve your institution's 1.0 /1.1 TLS API traffic during February, please refer to: here<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk_1C94uzATWXqWB1y2E4_9I5v-wJW7hsH3C-PHxzloGTryKjD3neVxlxs5W16CUXVXrh-VCu5i07-0fgGdDkieZudVvOglfjVrpNUSHcLca1gNTj43WgUCBq7SGh174SXk91FdW1BJpioHJ3IJIApAWADaH9zC97hBEq7jhkk2p8oZrDrPo3exFcAWdn7Co8pA==&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==&__=4eb9fa3f-ba63-432d-98ce-3c35b0ad7454.txt>.

Note that we will continue to send updated data monthly in case we identify more such traffic in the upcoming months.

For your info, during earlier checks with few customers, we have identified one possible source of 1.0 /1.1 TLS API calls - old SpinOMatic versions. If you are using older versions, please upgrade your SpinOMatic to an up-to-date version. for more information about SpinOmatic, please refer to
https://developers.exlibrisgroup.com/appcenter/spineomatic/<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk_1C94uzATWXmAJWuyxPZHmiAuPrCkabzi_gSSYcquJ20tcS8Z8RWqLoBMaddnM3PLeRWo9X7VTqYfO_oxZsAeqf22S8eeY26wbbETyHXGkFfCh7u2Ax4sADrUXWHybTHLTAlrsleKvm0hc7Kl9JRp8=&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==>
Other sources of TLS 1.0/1.1 traffic should also be identified and upgraded.

In case you need more information, please approach Ex Libris support by opening a case in SalesForce https://support.exlibrisgroup.com/<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk_1C94uzATWXpZflwcUvQCStHZ6Z95rm1dDop0HX8EILYUGrj4vTKCuqfIPGaqw3wss92pvN6uRmCRffoAUAOfP-7eSmKuVA7HexboooFE_m_-wEIP0ZEjRDMZ2qHjqKYJQ2Jx2T3041QQJDCzXD-DFvt-uvLDjsdgKTSsoP99fFgseTz3vBs1YdyqWEBlx-mnRV0d8ysV5x4FAM0jvphvxxKFoHTpgnrPS0qR62mF9CwcVUDABvo_QQJjUVuWKG7TGTV0GsfHW7l6EmUcDk4IlXnGyYtegFlmLKy8x6Wo0NRwm6-kERr16OeJNmWgKPF0fHlAIHrEu3VgkO5ZXmWCq8WOYifez1-XH7TJPGFqhOrhOW7bVmcb35RLuyBF_f1FxjKezSs-tLkFv_G_oCixZEAs0jBrtpUBku2A9NGEme&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==>.
To ensure quicker and more efficient handling of such a case, please enter "TLS deprecation" as the case's subject.

For additional information on TLS, see Transport Security Layer (TLS) Support<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk_1C94uzATWX-QhNoMrTXqV9DRMlWioJ2Fka9Ks9M8Hg9RX5HuE2CPhlz-NSEdtSX0uAnERxas0Glve2QyzsqGP6vnKpjmjvIjziJ4HTkFr1oFcete2DgJnVhWw-WWzFoPFcd227AoknaUlz2z9H3-WBnCqF2HKOJopyVuFnI0q0iuoOgGAGYXQ0CorSAuFo0PhP-wIGRBWBCAopvDo4-j9tj-bVaRPGH3AZI75pwYDc3oumq9mqhAgFfLaI0t9lxVU5jdYbJS-vBhGHIx9TFgVc1_uhDxZ4ZoGO9zz0WTxI3T-rqBSmKKAjQ6wHsYEH5RklzeWZYFCPdeU0nqqcGLLjteO8cbSYsplCnGpMIXYx_sxhytoId5DHQ2Uke8hdQpdVflSm8Y4FGTWd_XS0tQ0QMOpddHRGCa8Yzk7PZ8FL5tpUGmHtese4ikpgUC_ltL0H0o9ARQOnAW0KROiIsgoy3FDWefGDaCZLXZg_U1vlk192dwi17_7y0pjXHhYdYya8zylauIzQhxUs66k4dOjbtg6jtkIr9Q==&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==>.

Best regards,
Ex Libris support

Ex Libris | 1350 E Touhy Ave, Suite 150W, Des Plaines, IL 60018

Unsubscribe lcaldwell at pierce.ctc.edu<https://visitor.constantcontact.com/do?p=un&m=001CobJT8Ja0vWLNZ_Z6yHSbw%3D&ch=bfd48020-5cdd-11e4-bb67-d4ae5275505f&ca=0312e9bd-6d4d-4ee9-85f7-e7676b04cc0e>

Customer Contact Data Notice<https://www.constantcontact.com/legal/customer-contact-data-notice>

Sent by support at exlibrisgroup.com<mailto:support at exlibrisgroup.com> powered by

[Trusted Email from Constant Contact - Try it FREE today.]<http://www.constantcontact.com/index.jsp?cc=nge&rmc=VF19_3GE>
Try email marketing for free today!<http://www.constantcontact.com/index.jsp?cc=nge&rmc=VF19_3GE>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20210309/b91f64ff/attachment.html>