Rally

TLS 1.0 and 1.1 Deprecation Notice 

03-14-2018 04:27 PM

UPDATE

 

It has become apparent that several integrations, including the Add-in for Excel and other connectors as well as some API endpoints are negatively impacted by the deprecation of support for TLS 1.0/1.1. So, we are reverting this change for now. 


Please stay tuned for future updates. We do plan on moving forward with this deprecation of TLS 1.0/1.1 in the near future to be compliant with updated security policies.  This may require testing of integrations and/or updates of operating system configurations for anyone leveraging integrations or an API endpoint.

We will be sure to communicate what changes may be necessary prior to the future deprecation.  

 

Summary:

As of April 1, 2018, CA Agile Central will no longer support connections using Transport Security Layer (TLS) versions 1.0 and 1.1.

 

Here at CA Agile Central, we take the security of your data very seriously.   In order to comply with industry standards, best practices, and our commitment to providing the best possible experience, on April 1, 2018 we will be deprecating the ability to access CA Agile Central using a browser that does not have TLS 1.2 enabled.

 

How will this impact you?  

Those customers in compliance with our browser support policy should not be affected by this change.  However, we know that things don’t always go as planned, and we want to make you aware of the impacts of the change.  As of April 1, 2018, you will no longer be able to access CA Agile Central from the following browsers:

  • Firefox version 26 and earlier versions
  • Internet Explorer 8-10 on Windows 7 and earlier versions
  • Safari 6.0.4/OS X10.8.4 and earlier versions

 

Which browsers support TLS 1.2?

  • Chrome - v30 and higher
  • Firefox - v27 and higher
  • Internet Explorer - v11 and higher
  • Opera - v17 and higher
  • Safari - v7 and higher

 

This may also affect any integrations running on Windows 7 (or older) operating systems. To resolve this issue for the Excel plug-in, see the instructions here: Excel Add-in SSL/TLS Error 

Statistics
0 Favorited
0 Views
0 Files
0 Shares
0 Downloads

Tags and Keywords

Comments

04-06-2018 02:08 PM

The work-around for the Excel issue is totally unacceptable. We have a huge number of users, none of whom have access to edit their own registries for security reasons. The changes would have to be approved by our security team, and then applied by a help-desk staffer on a one-by-one basis, at the cost of an incredibly number of hours. 

This breakage is happening on a Friday afternoon. 

Very poor planning and response!

04-06-2018 02:05 PM

I am seeing an error in my Rally-HPALM integrations since the deprecation took place.  On all my integrations now, I get the following message.  I have TLS 1.0 and 1.1 turned OFF on my Internet Options.  SSL v2/v3 has been turned OFF and ON with no change in status.

 

[2018-04-06 18:01:35 Z]   ANY : RallyEIF::WRK::RallyConnection.initialize - Initializing Rally connection version 4.10.1
[2018-04-06 18:01:35 Z]   ANY : RallyEIF::WRK::QCConnection.initialize - Initializing ALM connection version 4.7.4
[2018-04-06 18:01:39 Z] ERROR : RallyEIF::WRK::RallyConnection.rescue in connect - Could not connect to Rally at https://rally1.rallydev.com/slm using Username/Password credentials
[2018-04-06 18:01:39 Z] ERROR : RallyEIF::WRK::RallyConnection.initialize - RallyAPI: - rescued exception - SSL_connect returned=1 errno=0 state=SSLv2/v3 read server hello A: tlsv1 alert protocol version on request to https://rally1.rallydev.com/slm/webservice/v2.0/security/authorize with params {}

 

Any help would be appreciated.  Thanks.

04-06-2018 01:20 PM

I also cannot connect using the Rally-Excel Add-in with the same ssl/tls error above.  Will this be addressed somehow?

04-06-2018 01:10 PM

It looks like this deprecation may have broken the Excel add-in, which we use on a regular basis.  Can someone check this out?  When I try connecting via SSO (which worked yesterday) I get this notice: 

 

 

When attempting to connect with log-in credentials, this is the error:

 

 

Please help!

Related Entries and Links

No Related Resource entered.