Skip navigation

Changes to our online security infrastructure

As an organisation that takes online payments, we need to comply with the PCI Security Standards Council.

Posted Wed 25 April 2018

Find out more on the PCI Security Standards Council website

It has informed us we need to stop supporting a security standard used for encrypting internet traffic between us and our customers, when taking payments. This means we will be disabling support for the TLS1.0  and 1.1 encryption protocols from 00:01 on Sunday 29 April 2018.

What do you need to do?

You need to make sure the internet browser you use to connect to UCAS’ web-based services – such as ucas.com, the collection tool, and web-link – can support the TLS1 1.2 standards. You may need to check this with your IT Support Team, and a small change to the configuration of your browser may be required.

How might this affect your student records system?

If you use xml-link to process applications, your technical teams may need to do some more in-depth checking. They’ll need to confirm your network infrastructure can support the TLS 1.2 standards.

Please note, this change does not affect student records systems using odbc-link.

As the PCI Security Standards Council is a global organisation, it’s likely that your technical teams will already be preparing, or will have already made these changes.

If you have any queries, please contact you technology relationship manager.