TLS 1.2 support coming in Blackbaud CRM version 4, Service Pack 5!

Hi, all!

We are pleased to provide some advance notice of changes in the upcoming Blackbaud CRM version 4.0 Service Pack 5, which will introduce support for version 1.2 of the TLS protocol.  TLS 1.2 is required in order to comply with Payment Application Data Security Standard (PA-DSS) version 3.1, released by the PCI Security Standards Council on 1 June 2015.  

More information about PA-DSS v 3.1 is available via press release from the PCI Security Standards Council:
https://www.pcisecuritystandards.org/pdfs/15_06_01_PA-DSS_3_1_Press_Release.pdf

As a result of this recent update to the PA-DSS standards, there will be two changes to the Blackbaud CRM version 4 system requirements, beginning with Service Pack 5:

• NET Framework version 4.5.2 will be required on all web and database servers
  • The Blackbaud installer for Service Pack 5 will be a full rebuild of the base installer of Blackbaud CRM and will run a .NET version detection.  You will receive a prompt to download a .NET update if these components are not detected during upgrade/installation.  
  • Pre-installation and reference material for .NET Framework 4.5.2 is available at the following Microsoft link: http://www.microsoft.com/en-us/download/details.aspx?id=42643
• Windows Server 2008 will no longer be a supported OS for Blackbaud CRM/BBIS web or database servers
  • Microsoft does not support TLS version 1.2 in Windows Server 2008, which prevents this OS from obtaining PA-DSS v3.1 compliance
  • Windows Server 2008 R2 is compatible with TLS version 1.2 and remains a supported OS  

Customization Developers working in Blackbaud CRM version 4, Service Pack 5 will need to compile new customizations against .NET 4.5.2.  In most cases, existing customizations compiled against earlier versions of .NET will not need a recompilation until a change is made to the customization files.  For more information specific to customization development in Service Pack 5, reference the SDK new features documentation once Service Pack 5 releases.

Some key PA-DSS dates for your reference:

• PA-DSS 3.1 is effective on 1 June 2015
• The expiry date for payment application listings validated to PA-DSS 3.1 is October 28, 2019.
• There is a transition period for applications currently undergoing PA-DSS 3.0 validations
  • New application submissions to PA-DSS 3.0 will be accepted until 31 August 2015
  • Applications being validated against PA-DSS 3.0 which are “in queue” (that is, submitted with invoice paid) by 31 August 2015 will have until 30 November 2015 to complete the validation process