Milestone online services discontinues support for TLS v1.0 and TLS v1.1 protocols
Milestone online services discontinue support for TLS v1.0 and TLS v1.1 protocols. As of March 6th, 2023, the Milestone Customer Dashboard, Online License Activation, and XProtect® Push Notification Feature will no longer support TLSv1.0 and TLSv 1.1 due to security vulnerabilities discovered in two versions of the protocol. This article will provide details about which versions of XProtect will be affected, and more.
To ensure the security of Milestone online services, TLS (Transport Layer Security) versions 1.0 and TLS (Transport Layer Security) version 1.1 have been disabled on all endpoints including, but not limited to online license activation, push notifications, and Customer Dashboard(CUDA).
Which services are affected? XProtect installations that use Transport Layer Security (TLS) protocol version 1.0 or version 1.1 after March 6th, 2023, will not be able to communicate with the Online License Activation, Customer Dashboard endpoints, or use the Push Notifications feature.
Which XProtect products are affected? Only terminated XProtect VMS and XProtect Professional VMS products up to and including the 2018 R2 release is affected, no matter which license type is used. Read more about the Product Lifecycle on our website.
Mitigations and workarounds - All affected services will require remediation — the steps needed are outlined in KB 53250. - As an alternative to the online license activation, the offline activation process can be used. Details on how to perform offline license activation can be found in this document: https://doc.milestonesys.com/latest/en-US/cuda/cuda_activatinglicenses.htm, under the section “Use offline activation”.
Article Number
000001274