Discussions
Support is Ending for HMAC-SHA1 in TBA Integrations
This notice is intended for customers who use Token-based Authentication (TBA) integrations that use HMAC-SHA1 as a signature method in your NetSuite accounts.
What is changing?
As of July 30, 2021, the HMAC-SHA1 signature method will stop working in sandbox accounts and test drive accounts. The account IDs of test drives begin with TSTDRV, for example, NetSuite development accounts. Before July 30, 2021, you should update your integrations to use HMAC-SHA256 as the signature method. This prohibition against the HMAC-SHA1 signature method will apply to all TBA integrations, including integrations from third-party solution providers.
Why is this changing?
In TBA integrations, HMAC-SHA1 is no longer cryptographically strong enough to protect this type of signing operation indefinitely. We are moving to
Regards,
@Robert Nedelkow-Oracle | NetSuite Support Community Administrator
Expand your NetSuite knowledge by joining this month's Ask An Expert Live.
In case you know someone who is new to NetSuite, we encourage you to direct them to our newly launched "New to NetSuite" page. This page is specifically designed to offer them information and guidance and help them make the most out of their NetSuite journey. Click here for more details.