End of Life for TLS 1.0 and 1.1 support

By May 2018, upgrade your operating system or application to a version that supports TLS 1.2. Otherwise, you can lose access to this service. 

Operating systems

Application frameworks

Transport Layer Security (TLS) is a security protocol that provides privacy and data integrity between two communicating applications. It is deployed widely for web browsers and other applications that require data to be securely exchanged over a network.

According to the protocol specification, TLS includes two layers, the TLS Record protocol and the TLS Handshake protocol. The Record protocol provides connection security. The Handshake protocol enables the server and client to authenticate each other, and negotiate encryption algorithms and cryptographic keys before data exchange.

Adobe's security compliance standards require the deprecation of older protocols by May 2018, and mandates the use of TLS 1.2 as the up-to-date version. If your system is not TLS 1.2-compliant, access to some Adobe services can be restricted.

Some Adobe services are web-based. You can only engage with them through a secure network connection. TLS helps ensure that the connection between your browser and these web services is secure and reliable.

As new browsers and operating systems are released, security standards are upgraded to ensure higher levels of privacy and data integrity. However, older versions of these browsers or OS are not updated to include the latest standards.

As the acceptable level of security rises, these older, less secure browser versions and applications are left behind.

To be able to connect with secure sites, update your OS and browser versions.

There have been documented attacks against TLS 1.0 using an older encryption method and the older versions are more vulnerable than TLS 1.2. For more information, see Attacks against TLS/SSL.

Adobe has security compliance standards that require disabling support for older protocols. One such standard ensures compliance with the Payment Card Industry (PCI). PCI adaptation server is a set of security standards require organizations that accept, process, store, or transmit credit card information to maintain a secure environment.

PCI compliance mandates the use of TLS 1.1 or higher by May 2018.

Most requests for Adobe web services originate from TLS 1.2-compliant user systems, with low traffic from TLS 1.1 systems.

Rather than wait for security patches around TLS 1.1, Adobe plans to migrate to TLS 1.2 so its web services are accessed more securely.

Adobe encourages users to quickly abandon the older versions to avoid exposure to security vulnerabilities.

Adobe expects you to use the older versions of TLS no later than May 2018.

For more information, contact Adobe support or your customer success manager.

It depends on the browser that you are using. All browsers mentioned in the system requirements list for Adobe services are configured to use TLS 1.2. If you are using a browser or version that does not figure in the list, update your browser.

Refer to System Requirements for list of browsers supported by Adobe services.

Adobe does not control error messages generated by the SSL communications layer. The browser generates these messages before connecting to Adobe services. Here are some examples of errors that can occur:

Internet Explorer 8 on Windows 7:

Internet Explorer 11 on Windows 7. (Internet Explorer 11 enables TLS 1.2 by default, but you can turn it off)

In this case, turn on TLS 1.2 from the advanced settings dialog rather than the using other choices. Other errors, such as the following can also occur:

• Unable to connect to the service
• Service not available
• Error in connection