As a result of the GSA security requirement to remove the use of TLS 1.0 from the USAccess infrastructure, any workstation that connects to the USAccess service to complete enrollments or activations will need a registry update to disable TLS 1.0 in the workstation’s configuration as well as add TLS 1.1/1.2 support to the CCM libraries. This impacts all fixed Credentialing Units (FCUs), legacy fixed enrollment/activation workstations, Mobile Credentialing Units (MCUs), as well as Light Activation (LA) and Light Credentialing Solution (LCS) kits. Adding TLS 1.1/1.2 support to the CCM libraries and updating the registries is required for all workstations.
Agencies should deploy this update as soon as possible, as the back-end change to remove TLS 1.0 support will be implemented the weekend of September 14th, 2018.
Fixed/FCU workstations will be updated using the automated system, so no Agency intervention is needed for these fixed units.
Those with LAS/LCS/MCU kits should follow the instructions posted at https://tst.usgs.gov/applications/security/light-activation-kits/#tls
Even though the GPO that applied TLS 1.0 to LAS/LCS kits has already been removed from the environment, sites are still being asked to run this registry fix and msi to ensure that the setting changes have taken place.
