solution Contentsolution Content

SUPPORT COMMUNICATION- CUSTOMER ADVISORY

Document ID: c05945745

Version: 1

SSL 3.0 and TLS 1.0 Protocol Support Removed From Use on HP ftp.hp.com Site

Notice: The information in this document, including products and software versions, is current as of the release date.The document is subject to change without notice.

Release date : 12-Mar-2018

Last updated : 12-Mar-2018

DESCRIPTION
On 28 February 2018, HP IT removed support for the SSL v3.0 and TLS v1.0 security protocols when connecting the HP FTP site using the HTTPS protocol. As of the date of this advisory, only the following protocols are supported for accessing the HP FTP site:
NOTE: The ftp protocol will be removed at some point in 2018. At that time you will no longer be able to access SoftPaqs (and other files) using the ftp://ftp.hp.com link. You will need to modify your tools and processes to use either http://ftp.hp.com or https://ftp.hp.com instead. HP recommends that you begin now to make the necessary changes.
HP is taking these actions as part of an industry-wide move to help ensure customer security and privacy by discontinuing the use of less secure protocols.

SCOPE
Information in this document applies to the following
Tools:
Any tool that uses SSL v3.0 or TLS v1.0 when connecting the HP FTP site using the HTTPS transfer protocol ( https://ftp.hp.com) including older versions of the following HP manageability tools.
  • HP Manageability Integration Kit (HP MIK) - versions prior to v2.0.52.1
  • SoftPaq Download Manager (HP SDM) - versions prior to v4.3.23.0
  • HP Image Assistant (HPIA) - versions prior to v3.0.8.1
HTTPS security protocols removed:
  • SSL v3.0
  • TLS v1.0
Computers:
  • Any computer using the above mentioned HP tools or any other tool that access the HP ftp site.
RESOLUTION
Update custom tools that are currently using SSL v3.0 or TLS v1.0 security protocols to access the HP FTP site ( https://ftp.hp.com) to use a supported protocol security protocol (TLS v1.1 and TLS v1.2 are supported).
Plan now to update custom tools that use the FTP protocol to access the HP FTP site.
Update to the latest versions of HP manageability tools:
  • HP Manageability Integration Kit (HP MIK) - versions prior to v2.0.52.1
  • SoftPaq Download Manager (HP SDM) - versions prior to v4.3.23.0
  • HP Image Assistant (HPIA) - versions prior to v3.0.8.1
See Customer Advisory c05939730 for details on updating the above mentioned HP manageability tools.

Hardware platforms affected : HP Business Desktop PCs, HP Business Desktop PCs, HP EliteBook Notebook PCs, HP Mobile Workstation, HP Notebook PCs, HP ProBook Notebook PCs, HP x2 PCs, Personal Workstations, Rugged Notebook PCs, Ultrabook and Sleekbook

Operating systems affected : Not applicable

Software affected : Not applicable

Support Communication Cross Reference ID : IA05945745

HP Inc. shall not be liable for technical or editorial errors or omissions contained herein. The information provided is provided "as is" without warranty of any kind. To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restoration. The information in this document is subject to change without notice. HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries. Other product and company names mentioned herein may be trademarks of their respective owners.