[Wactclc-alma] FW: Deprecation of TLS 1.0 /1.1 for Ex Libris API - February data and call to action

Tue Mar 9 12:29:19 PST 2021

Thanks for posting this, Lesley.

Note that this will *NOT* affect patron loading, as those loads do not use any APIs.

I am not aware of any API use at any of our institutions, except by me for occasional project work, such as the ctcLink prep work.

But, this issue *DOES* affect older versions of *Spineomatic*.

So, if you use Spine-o-matic for label printing.

The version of Spine-o-matic you should be using is here:

https://github.com/ExLibrisGroup/SpineOMatic/releases/download/v8.0.0/SpineLabeler.exe

Wade Guidry
Library Consortium Services Manager, WACTCLC
wadeg at bigbend.edu<mailto:wadeg at bigbend.edu>
(509) 760-4474
http://www.wactclc.org<http://www.wactclc.org/>

Schedule a meeting with me<https://calendly.com/wactclcalmaprimo/>
My Zoom Instant Meeting Link<https://bigbend.zoom.us/j/8763410457>

From: Wactclc-alma <wactclc-alma-bounces at lists.ctc.edu> On Behalf Of Lesley Caldwell
Sent: Tuesday, March 9, 2021 9:33 AM
To: WACTCLC Alma Discussion <wactclc-alma at lists.ctc.edu>
Subject: [Wactclc-alma] FW: Deprecation of TLS 1.0 /1.1 for Ex Libris API - February data and call to action

CAUTION: Originated outside our network. Do not click links or open attachments unless you validate the sender.

Good morning,

Did anyone else receive this email?

I assume Pierce College got it because we were using an API for our new books list. (It’s not currently in use because our purchasing and processing of new books has slowed since last March.)

Are there any other APIs I’m not thinking of that others are using?

See y’all soon,
Lesley

From: Ex Libris <support at exlibrisgroup.com>
Sent: Tuesday, March 9, 2021 3:12 AM
To: Lesley Caldwell <LCaldwell at pierce.ctc.edu>
Subject: Deprecation of TLS 1.0 /1.1 for Ex Libris API - February data and call to action

CAUTION: This email originated from outside Pierce College. Do not click links or open attachments unless you have confirmed this is an authentic message from sender and know the content is safe. If you are unsure, contact the Help Desk at 253-964-6373 or email Helpdesk at pierce.ctc.edu<mailto:Helpdesk at pierce.ctc.edu>
[Image removed by sender.]

[Image removed by sender.]<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk0lCqoSXTCmpTh67w0-i2RONwDrPMJjDHcSALyxVQvRGsWy6OLLfDs66JIqjag_xr_wshvwvVdmc8q_75BloJRRhmz90TqXrGA==&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==>

Dear ExLibris customer,
You are receiving this mail as an active system admin user in Alma or as an Alma mailing list subscriber.

TLS is a cryptographic protocol that provides authentication and data encryption between different endpoints (for example, the user's desktop and the application server). Various vulnerabilities (such as POODLE and DROWN) have been found in TLS versions 1.0 and 1.1 in recent years.
Ex Libris wants to avoid security vulnerabilities and to align with industry standards. Ex Libris already removed its support for TLS 1.0 and 1.1 in Alma production environments and will support only TLS 1.2 or later for web access.

We are now deprecating the TLS 1.0 and TLS 1.1 support for Ex Libris API.
A gradual deprecation process will start at the end of April 2021.

We have identified that during February 2021, your institution had local applications calling Ex Libris APIs using TLS 1.0 or 1.1.
To ensure that your local applications continue to function, you must identify the relevant applications and upgrade them to work with TLS 1.2.
To retrieve your institution's 1.0 /1.1 TLS API traffic during February, please refer to: here<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk_1C94uzATWXqWB1y2E4_9I5v-wJW7hsH3C-PHxzloGTryKjD3neVxlxs5W16CUXVXrh-VCu5i07-0fgGdDkieZudVvOglfjVrpNUSHcLca1gNTj43WgUCBq7SGh174SXk91FdW1BJpioHJ3IJIApAWADaH9zC97hBEq7jhkk2p8oZrDrPo3exFcAWdn7Co8pA==&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==&__=4eb9fa3f-ba63-432d-98ce-3c35b0ad7454.txt>.

Note that we will continue to send updated data monthly in case we identify more such traffic in the upcoming months.

For your info, during earlier checks with few customers, we have identified one possible source of 1.0 /1.1 TLS API calls - old SpinOMatic versions. If you are using older versions, please upgrade your SpinOMatic to an up-to-date version. for more information about SpinOmatic, please refer to
https://developers.exlibrisgroup.com/appcenter/spineomatic/<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk_1C94uzATWXmAJWuyxPZHmiAuPrCkabzi_gSSYcquJ20tcS8Z8RWqLoBMaddnM3PLeRWo9X7VTqYfO_oxZsAeqf22S8eeY26wbbETyHXGkFfCh7u2Ax4sADrUXWHybTHLTAlrsleKvm0hc7Kl9JRp8=&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==>
Other sources of TLS 1.0/1.1 traffic should also be identified and upgraded.

In case you need more information, please approach Ex Libris support by opening a case in SalesForce https://support.exlibrisgroup.com/<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk_1C94uzATWXpZflwcUvQCStHZ6Z95rm1dDop0HX8EILYUGrj4vTKCuqfIPGaqw3wss92pvN6uRmCRffoAUAOfP-7eSmKuVA7HexboooFE_m_-wEIP0ZEjRDMZ2qHjqKYJQ2Jx2T3041QQJDCzXD-DFvt-uvLDjsdgKTSsoP99fFgseTz3vBs1YdyqWEBlx-mnRV0d8ysV5x4FAM0jvphvxxKFoHTpgnrPS0qR62mF9CwcVUDABvo_QQJjUVuWKG7TGTV0GsfHW7l6EmUcDk4IlXnGyYtegFlmLKy8x6Wo0NRwm6-kERr16OeJNmWgKPF0fHlAIHrEu3VgkO5ZXmWCq8WOYifez1-XH7TJPGFqhOrhOW7bVmcb35RLuyBF_f1FxjKezSs-tLkFv_G_oCixZEAs0jBrtpUBku2A9NGEme&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==>.
To ensure quicker and more efficient handling of such a case, please enter "TLS deprecation" as the case's subject.

For additional information on TLS, see Transport Security Layer (TLS) Support<http://r20.rs6.net/tn.jsp?f=001uJCNnsWKobqleGWDMIVD37VIS4cyUAppwpoD-9vDTUrxu7jt1-Swk_1C94uzATWX-QhNoMrTXqV9DRMlWioJ2Fka9Ks9M8Hg9RX5HuE2CPhlz-NSEdtSX0uAnERxas0Glve2QyzsqGP6vnKpjmjvIjziJ4HTkFr1oFcete2DgJnVhWw-WWzFoPFcd227AoknaUlz2z9H3-WBnCqF2HKOJopyVuFnI0q0iuoOgGAGYXQ0CorSAuFo0PhP-wIGRBWBCAopvDo4-j9tj-bVaRPGH3AZI75pwYDc3oumq9mqhAgFfLaI0t9lxVU5jdYbJS-vBhGHIx9TFgVc1_uhDxZ4ZoGO9zz0WTxI3T-rqBSmKKAjQ6wHsYEH5RklzeWZYFCPdeU0nqqcGLLjteO8cbSYsplCnGpMIXYx_sxhytoId5DHQ2Uke8hdQpdVflSm8Y4FGTWd_XS0tQ0QMOpddHRGCa8Yzk7PZ8FL5tpUGmHtese4ikpgUC_ltL0H0o9ARQOnAW0KROiIsgoy3FDWefGDaCZLXZg_U1vlk192dwi17_7y0pjXHhYdYya8zylauIzQhxUs66k4dOjbtg6jtkIr9Q==&c=_zCgNIcvDHf_s24eYLo5aC8gzYxbJq583jCyCVcihaupFvyL5YWE2Q==&ch=0UHHE0KqSMBkyXUAgG-_Tv_55Uzh6W-unu1DUXlKGLGuo3HLeNXIrA==>.

Best regards,
Ex Libris support

Ex Libris | 1350 E Touhy Ave, Suite 150W, Des Plaines, IL 60018

Unsubscribe lcaldwell at pierce.ctc.edu<https://visitor.constantcontact.com/do?p=un&m=001CobJT8Ja0vWLNZ_Z6yHSbw%3D&ch=bfd48020-5cdd-11e4-bb67-d4ae5275505f&ca=0312e9bd-6d4d-4ee9-85f7-e7676b04cc0e>

Customer Contact Data Notice<https://www.constantcontact.com/legal/customer-contact-data-notice>

Sent by support at exlibrisgroup.com<mailto:support at exlibrisgroup.com> powered by

[Image removed by sender. Trusted Email from Constant Contact - Try it FREE today.]<http://www.constantcontact.com/index.jsp?cc=nge&rmc=VF19_3GE>
Try email marketing for free today!<http://www.constantcontact.com/index.jsp?cc=nge&rmc=VF19_3GE>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20210309/f8b66059/attachment-0002.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ~WRD000.jpg
Type: image/jpeg
Size: 823 bytes
Desc: ~WRD000.jpg
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20210309/f8b66059/attachment-0008.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.jpg
Type: image/jpeg
Size: 332 bytes
Desc: image001.jpg
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20210309/f8b66059/attachment-0009.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.jpg
Type: image/jpeg
Size: 1472 bytes
Desc: image002.jpg
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20210309/f8b66059/attachment-0010.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.jpg
Type: image/jpeg
Size: 800 bytes
Desc: image003.jpg
URL: <http://lists.ctc.edu/pipermail/wactclc-alma_lists.ctc.edu/attachments/20210309/f8b66059/attachment-0011.jpg>