Sage 100

 View Only
  • 1.  Avalara AvaTax TL Version

    Posted 01-10-2022 11:10
    How do you check the TLS version Avalara AvaTax connector is using?   My customer just received the following email:

    To ensure the security of our customers' information, Avalara will disable support for Transport Layer Security (TLS) encryption versions 1.0 and 1.1. If you're currently using TLS 1.0 or 1.1 in your Avalara AvaTax account, you must upgrade to TLS 1.2 or greater.

    What this means for you

    Support for TLS 1.0 and 1.1 will be disabled in the Sandbox environment on February 1, 2022, and in the Production environment on March 31, 2022. Please confirm with your IT team whether your servers and Avalara AvaTax connector are using TLS 1.0 or 1.1. Failure to update your software could result in an inability to connect to your Avalara AvaTax account.

    Thanks,
    Avalara Product Support   



    ------------------------------
    Doug Higgs
    Midwest Commerce Solutions, Inc
    (312) 315-0960
    Chauffeur, Chef, and Personal Assistant to Sprinkles
    ------------------------------


  • 2.  RE: Avalara AvaTax TL Version

    Posted 01-10-2022 11:57
    Could this be a DSD connector question?

    ------------------------------
    Jeff Schwenk
    FORMER 90M Board Member -140,000,000 is a TERRIBLE thing to waste!!!
    Bottomline Software, Inc.
    Waynesboro VA
    540-221-4444
    ------------------------------



  • 3.  RE: Avalara AvaTax TL Version

    Posted 01-10-2022 12:05
    Here's a handy chart I found which seems to indicate which versions of Windows OS support TLS 1.2 by default: 

    https://docs.microsoft.com/en-us/windows/win32/secauthn/protocols-in-tls-ssl--schannel-ssp-


    ------------------------------
    Wayne Schulz
    Schulz Consulting
    860-516-8990
    ------------------------------



  • 4.  RE: Avalara AvaTax TL Version

    Posted 01-10-2022 12:20
    Thanks @Wayne Schulz  IT has confirmed that the only TLS 1.2 and 1.3 protocols are running on the server.  I guess this means that if AvaTax is working it must be using one of those two protocols.  I hate to guess though and by the wording of the Avalara email it seems there may be a way to determine what protocol the AvaTax connector is using.


    ------------------------------
    Doug Higgs
    Midwest Commerce Solutions, Inc
    (312) 315-0960
    Chauffeur, Chef, and Personal Assistant to Sprinkles
    ------------------------------



  • 5.  RE: Avalara AvaTax TL Version

    Posted 01-11-2022 11:43

    @Doug Higgs, it looks like you have this figured out via @Wayne Schulz's post.  You can check a server or workstation for which TLS levels are active by going to Control Panel->Internet Settings->Advanced and then scroll down to the bottom.  You should see something like this:


    My understanding is that for Sage 100 Advanced the TLS 1.2 should be active on the Server.  I don't think that it MUST be active on the workstation but it certainly wouldn't hurt.  Additionally, I would make sure that it's active on workstations for Sage 100 Standard. Just in case.​​



    ------------------------------
    Chuck Peddy
    Smartbridge Partners
    ------------------------------



  • 6.  RE: Avalara AvaTax TL Version

    Posted 01-11-2022 12:01
    Thanks @Chuck Peddy  I was able to verify the server uses TLS 1.2 and 1.3.  My concern is if AvaTax was using 1.2 so the application protocol matched the server protocol.  I asked DSD and they indicated the following: Navigate to the mas90\AvaTax directory, find the file called "Avalara.AvaTax.Adapter.dll". Right-click on that file and select 'Properties', then select the 'Details' tab. Look at the Product version. If the Product version is 17.2.0.0, then you're on the supported version


    ------------------------------
    Doug Higgs
    Midwest Commerce Solutions, Inc
    (312) 315-0960
    Chauffeur, Chef, and Personal Assistant to Sprinkles
    ------------------------------



  • 7.  RE: Avalara AvaTax TL Version

    Posted 01-11-2022 13:39
    I reached out to DSD last week about this.
    "We did receive the notification from Avalara regarding the TLS 1.0/1.1 and we are meeting with them next week to determine what changes, if any, are needed for the connector.  The only possible change needed in our install is the DLL installation, no code changes would be needed, but we'll know more later."  I''ll check in next week on this. For now Avalara is supporting 1.0 and 1.1.

    ------------------------------
    Billy Balser
    Sage 100 Consultant
    Blytheco LLC
    Atlanta GA
    9495839500
    ------------------------------



  • 8.  RE: Avalara AvaTax TL Version

    Posted 01-11-2022 13:45
    @Billy Balser  Besides having the correct dll version on the server, you may have to un-register and re-register the dll on each workstation.​

    ------------------------------
    Doug Higgs
    Midwest Commerce Solutions, Inc
    (312) 315-0960
    Chauffeur, Chef, and Personal Assistant to Sprinkles
    ------------------------------



  • 9.  RE: Avalara AvaTax TL Version

    Posted 01-11-2022 20:28
      |   view attached
    Attached is the latest documentation from DSD pertaining to the AvaTax TLS security issue.

    ------------------------------
    Doug Higgs
    Midwest Commerce Solutions, Inc
    (312) 315-0960
    Chauffeur, Chef, and Personal Assistant to Sprinkles
    ------------------------------



  • 10.  RE: Avalara AvaTax TL Version

    Posted 01-12-2022 09:08
    Doug - Thank you for posting this!
    It keeps us all ahead of the curve for when our Avalara customers call.

    ------------------------------
    Wayne Schulz
    Schulz Consulting
    860-516-8990
    ------------------------------