CRITICAL Passport POS Software Upgrade Notice – Worldpay Payment Network

Update:  Worldpay extended upgrade deadline to June 24, 2018.

Update:  v11.02G maintenance pack “MP2” now available for order.  Ref. matrix below.

Effective June 24, 2018, Worldpay will upgrade their network to only support the more secure “TLS 1.1” and “TLS 1.2” cryptography standards.  Older and less secure encryption methods, “SSL 3” and “TLS 1.0” will no longer be supported.

Retailer Impact:  Passport POS systems communicating to the Worldpay network via TCP/IP communications may require a software upgrade.  Please be aware that sites have two options for communicating TCP/IP to the network.

1. Serial to TCP/IP interface box (I.e. Systech, Cybera, EchoSat SPG, etc…) – The Passport POS is programmed for “Dial” communications and uses an interface box or managed firewall to communicate TCP/IP to Worldpay.  For these system configurations, the retailer should contact their local Gilbarco service contractor or interface box provider regarding TLS capabilities and upgrade requirements.  In this scenario, the Passport POS system itself would not require a software upgrade.
2. POS Direct TCP/IP – The Passport POS is programmed for “TCP/IP” communications and talks TCP/IP directly to Worldpay without an interface box. Passport systems configured in this manner Will require an immediate software upgrade.  See “Passport Software Upgrade Requirements” table below.

Sites Affected:  Any Passport POS system processing payment transactions on the Worldpay network via “TCP/IP” communications.

Sites not Affected:  Passport systems programmed for Dial communications.

Timing:  Where needed, Retailers should complete the upgrade of their Passport POS software application no later than May 31, 2018.

Passport Software Upgrade Requirements to Support New Worldpay TLS standards:

Where needed, failure to upgrade Passport POS or interface box software before May 31, 2018 will result in a “Network Offline” condition and the site will not be able to process credit or debit sales.

Worldpay and Gilbarco have identified most, but not all sites processing transactions via TCP/IP communications, or if the site is using a “Serial to TCP/IP” interface box.  Worldpay has identified approximately 100 vulnerable Passport sites and Gilbarco is in the process of contacting these Retailers.  In most cases, we will inform the Retailer to contact their local Gilbarco service contractor for assistance.

Failure to Act:  Where needed, Retailers that fail to upgrade either their Passport POS or interface box software before WorldPay changes their cryptography requirements WILL experience a “Network Offline” condition and will not be able to process credit or debit transactions.

If this situation occurs, there is no immediate workaround and the Retailer will be down until the software is upgraded or the site is converted to dial communications.

Please share this information with your Sales and Service personnel.