Support is Ending for HMAC-SHA1 in TBA Integrations

This notice is intended for customers who use Token-based Authentication (TBA) integrations that use HMAC-SHA1 as a signature method in your NetSuite accounts.

What is changing?

As of July 30, 2021, the HMAC-SHA1 signature method will stop working in sandbox accounts and test drive accounts. The account IDs of test drives begin with TSTDRV, for example, NetSuite development accounts. Before July 30, 2021, you should update your integrations to use HMAC-SHA256 as the signature method. This prohibition against the HMAC-SHA1 signature method will apply to all TBA integrations, including integrations from third-party solution providers.

Why is this changing?

In TBA integrations, HMAC-SHA1 is no longer cryptographically strong enough to protect this type of signing operation indefinitely. We are moving to