NAHMA HUD Update: TRACS Notification on Transport Layer Security (TLS) 1.0 Upgrade

• By: admin
• On: 08/23/2018 07:59:34
• In: HUD Notices

TRACS Notification on Transport Layer Security (TLS) 1.0 Upgrade
TRACS Notification URL:  https://www.hud.gov/program_offices/housing/mfh/trx/trxsum
 
1. What Is TLS
 
SSL stands for Secure Sockets Layer and was originally created by Netscape. SSLv2 and SSLv3 are the 2 versions of this protocol (SSLv1 was never publicly released). After SSLv3, SSL was renamed to Transport Layer Security and started with TLSv1.0 which is an upgraded version of SSLv3.
 
 
2. TLS v1.0 Upgrade
 
HUD has been directed by National Institute of Standards and Technology (NIST) and Department of Homeland Security (DHS) to upgrade from TLS v1.0 to TLS v1.2 to meet PCI Data Security Standards (PCI DSS).
 
It is critical to upgrade, if HUD were to continue with the current TLS version, it will put HUD and our external business partners at risk, including financial transactions as there are unaddressed security vulnerabilities.
 
 
3. September 3, 2018 Deadline for TLS v1.0 Upgrade
 
To address this risk, HUD has determined that occupancy software applications submitting electronic files to the Tenant Rental Certification System (TRACS) using the outdated TLS v1.0 will have ALL ACCESS disabled on September 3, 2018.
 
To avoid rejection of TRACS electronic files without TLS v1.2, please upgrade your occupancy software to address this issue prior toSeptember 3rd.
 
 
4. Multifamily Housing Help Desk Support 1-800-767-7588
 
You will be able to reach a Help Desk Analyst during normal business hours or you can leave a voicemail requesting technical assistance.