TLS is a security protocol that creates encryption paths over computer networks to help ensure that online communications cannot be intercepted.

Security protocols are a set of operations or steps that occur when data is delivered or exchanged between parties (e.g., when sending an email, processing a credit card transaction, or when any data is shared between a web browser and website). Security protocols help protect the communication and shared data.

Basic Authentication is outdated and more vulnerable to breach. Also, the two largest email providers (Google and Microsoft) have stopped or are planning to stop supporting Basic Authentication.

TLS 1.0 and 1.1 were replaced by TLS 1.2 starting in 2008 to provide improved data security and better protection for customer and application information communicated over the internet. Many companies and standards (e.g., HIPAA, PCI) require the use of TLS 1.2, as do many Sage ISVs. This move to TLS 1.2 will provide increased data protection and decreased risk for our customers and partners.

Since its launch in 2008, companies and regulatory standards have increasingly required adoption of TLS 1.2. Sage 100 and 300 began supporting the latest standard in our products several years ago, including announcements in product release notes and updates. However, until recently, Sage had not announced a mandatory upgrade.

Many customers are on older product versions where TLS 1.2 is not used. Sage implemented support of TLS 1.2 in Sage 100 and Sage 300 starting with version 2019. Customers automatically adopt the new standard as part of their update to any recent Sage 100 and Sage 300 version. We are notifying customers now to help ensure they will have adequate time to upgrade before Sage stops supporting the old security protocol come September 2023.

Subscription customers will be required to be on a version that utilizes TLS 1.2. For Sage 100 this means 2019.4, 2020.1 and newer versions. For Sage 300 this is 2019.6, 2020.3 and newer versions. Customers not on one of these recent releases, must upgrade to a version that utilizes TLS 1.2.

Upgrade time varies by customer and depends on several factors. Some customers will be able to apply product updates (PU’s), while others will need to perform a full upgrade as they would when moving to any new product version.

For customers that may also require a hardware upgrade, use of the hosted Sage Partner Cloud program may reduce or eliminate the need for a hardware investment, contact your DSD Strategic Account Manager or info@dsdinc.com

For customers on subscription, the software will be unable to acquire an updated expiration date from servers and will initiate subscription warning messages. If not addressed, the software will revert to read-only mode and restrict access after a grace period of approximately 45 days.

TLS 1.3 has not been implemented in Sage 100 and Sage 300 products, and internal systems do not require its use. While there are not specific plans yet, partners and customers Last update: August 12, 2022 will be notified once we update our software to support TLS 1.3 and notified well in advance of any required upgrade.

TLS 1.2 is already included in current and supported versions of the software. If you are not on one of the versions using TLS 1.2, you will need to upgrade.

For Sage 100, you must be on 2019.4, 2020.1 or a more current version.

For Sage 300, you must be on at least 2019.6, 2020.3 or a more current version.

To identify what version of Sage 100 you are running, access Help from the menu bar and select About. The major release will be displayed. For Sage 300, select System Info.

For Sage 100, the product update will be listed as part of the version number. For example, version 7.00.4.0 would mean you are using product update (PU) 4.

Each ISV will use TLS differently and have their own support policies. It is best to check with each of the vendors you use to determine if their products are impacted and if any updates are required.

The necessity to upgrade to TLS 1.2 is a requirement that has impacted many industries. Security has been increased in TLS 1.2 to help prevent personal information from being breached. It is important to discuss the options provided by Sage with us.

Yes. Customers not on a subscription plan may not experience a direct impact to software services but are highly encouraged to upgrade to a current version of Sage 100 and Sage 300 that supports TLS 1.2 to help mitigate vulnerabilities presented in the continued use of TLS 1.0 and 1.1.

Subscription customers will be impacted as outlined in the Overview section. Please note that Sage 100 payroll and Sage 300 payroll are only available as a subscription and therefore are impacted even if your ERP is a perpetual/M&S plan.