24-hour Test Window for HMAC-SHA1 Deprecation for Integrations Using Token-based Authentication

This notification is to inform you that the test window planned to occur in July has been postponed. The test window would have prohibited the use of the HMAC SHA-1 signature method for Token-based Authentication (TBA) integrations.

We will notify you when the new test window schedule has been determined. However, you should take this opportunity to update the signature method used by your TBA integrations.

What is Changing?

Some TBA integrations in your NetSuite account are using the HMAC-SHA1 algorithm. The HMAC-SHA1 algorithm is no longer considered secure. Review integrations that use the TBA feature in your account. Update all TBA integrations to use the HMAC-SHA256 algorithm as the signature method. This request for review applies to all integrations in your account, including integrations from third-party solution providers. If your TBA integrations are not using the HMAC-SHA256 signature method, you must take the following Required Actions. If you do not make the necessary updates, your TBA integrations that still use the HMAC-SHA1 signature method will stop working.