Actions are required by Anaplan workspace administrators to update your Anaplan environment to support TLS versions 1.1 or 1.2.
Transport Layer Security (TLS) is a security protocol that provides privacy and security to applications that communicate with each other over a network. This protocol ensures that connections are made between the intended end points using encryption and identity verification.
As an older version, TLS 1.0 has several security vulnerabilities that are fixed in TLS 1.1 and 1.2. As a result, it is now considered standard security practice to disable TLS 1.0 for websites, web applications, and APIs and only support TLS 1.1 and TLS 1.2.
We are confident the improved security provided by transitioning support solely to TLS 1.1 and 1.2 is worth the minor inconvenience created by this change.
This change is effective as of October 7, 2017. If you have not carried out these steps, please do so as soon as possible to ensure that your organization is not affected.
Note that after this change, devices that run on iOS 8 or older and Android 5 or older are no longer supported.
Below you’ll find additional details for each action item:
Upgrade to Java 8 using one of these options if your organization uses Java 6.x or 7.x with Anaplan Connect:
Option 1: Write a shell script that sets the JAVA_HOME environment variable to the location of the Java 8 Runtime Environment you want to use.
Option 2: Contact Anaplan Support for a script to replace AnaplanConnect.bat or AnaplanConnect.sh. The replacement script ensures that you are using a supported version of Java for Anaplan Connect.
Option 3: If you have already installed Anaplan Connect, create your own replacement script:
Windows .bat file | Linux/UNIX/MacOS .sh file | |
Original: | rem Start the Java virtual machine "%JAVA%" %JAVA_OPTS% -classpath "%CP%" com.anaplan.client.Program %* |
# Start the Java virtual machine exec "${java}" ${JAVA_OPTS} |
Change to Java 8: |
rem Start the Java virtual machine "C:\Program Files\Java\jre1.8.0_66\bin\java" %JAVA_OPTS% -classpath "%CP%" com.anaplan.client.Program %* |
# Start the Java virtual machine |
The directory name on your computer might differ from these examples. For more information, see Data Integration on Anaplan Community.
You can test clients such as Anaplan Connect or custom integrations by changing the API URI in your scripts to a URI that has TLS 1.0 disabled. This verifies whether your clients work with TLS 1.1 or higher.
To test your custom scripts:
Upgrade browsers that do not support TLS 1.1 or higher. We recommend using the latest versions of Internet Explorer, Mozilla Firefox, Google Chrome, or Apple Safari.
We have released a new version of both the Excel and Powerpoint Add-ins. Previous versions that use TLS 1.0 are no longer able to access Anaplan. If you still have previous versions, please follow the prompts to automatically download and update to the new version the next time you open Excel or Powerpoint. If you don't receive prompts or you prefer to download the latest versions manually, you can do so from the Anaplan Downloads form.
Feel free to contact us at support@anaplan.com for further assistance.
Manager, Community Content. Member of the Anaplan Community team located in Anaplan's Minneapolis office.