Businesses are being warned that failure to keep up to date with changes to internet security could see them locked out of secure websites, including the Bacs scheme used to make salary or supplier payments or to collect by direct debit, because of the introduction of a new security protocol
From 13 June 2016, Bacs is adopting the new security protocol called SHA-256 SSL. At the same time as this change is being made, Bacs will withdraw support for older connection protocols. After that date, only TLS 1.1 and 1.2 will be supported.
Any business which wants to access Bacs via Bacstel-IP or the payment services website to make or collect payments will need to have a web browser, operating system, and – if used – a Bacs approved software solution that support the new changes.
Bacs is advising that a business which is a direct submitter to Bacs should speak to their software supplier. If businesses log onto the payment services website direct to download reports, the IT provider needs to check that their browser and operating system will support the changes.
Businesses which use Bacs approved bureaux will need to ensure they are aware of the deadline for updating their web browser to ensure it is compatible.
For further technical information about the changes to Bacs security
For details about browser compatibility, go to Payment Services Website access and browser and operating systems information
