Important Information Concerning TLS 1.2 And Maintaining PCI Compliance

Matt Crawford
Matt Crawford
Tenth Anniversary Participant Facilitator 1
in Blackbaud CRM™ and Blackbaud Internet Solutions™ Blog

At Blackbaud, your security is our priority. As the cloud software partner to many leading social good organizations, we have world-class security, privacy, and risk management teams that work around the clock, every day, to ensure that your data is safe and accessible to you.


We regularly update our environments, applications, and services to fend off the latest security threats and ensure that we they remain compliant with the security standards set by regulatory bodies like the Payment Card Industry Security Standards Council (PCI Council).


To make use of these enhancements, it’s vital that each Blackbaud CRM customer ensures their environments are up to date on the most recent Blackbaud product releases to maintain the security of data and the continuity of business operations.

There are a couple critical security deadlines that require action soon.

The first deadline is February 15, 2018:

All hosted Blackbaud CRM clients on a version of Blackbaud CRM below v4.0 SP13 Hotfix need to upgrade by February 15, 2018. This is a mandatory deadline in order to maintain PCI compliance for all hosted Blackbaud CRM clients. The hotfix is available [at this link].


Blackbaud also recommends that on-premise, customers who have public BBIS webpages also install this hotfix as soon as possible to maintain PCI compliance.

The second deadline is March 15, 2018:

All Blackbaud CRM clients need to be on v4.0 SP5 or higher prior to March 15, 2018 to ensure compliance with Transport Layer Security standards. Clients that fail to upgrade prior to this date risk losing the ability to process payments, send emails, and access websites, thereby significantly impacting business operations.


Your Blackbaud customer success manager is available to answer questions and assist you in planning for the effort required to make sure the necessary upgrades are completed prior to the required deadlines. Additionally, please review [this helpful link] to learn about other products in your portfolio that may be impacted by PCI Council regulations.

Categories