Bacs cookie policy

We use cookies on our website to provide you with the best possible online experience. By continuing to use this site, you give consent for cookies to be used. Please read our cookie policy for more information and details on how to change your preferences. Cookie Policy.

SHA-2

 

SHA-256 SSL AND TLS1.1/1.2 SECURITY UPGRADE

Security updates are now live.

​IMPORTANT UPDATE

Important update: The latest security updates called SHA-256 SSL and TLS1.1/1.2 are now live. This means your access to Bacs Services is now the most secure it has ever been and gives your payment data the highest security to protect against interception and misuse.

If you are experiencing difficulty in accessing Bacs Services

Unable to submit payment files

If your business cannot submit payment files via Bacs then please contact your Software Soloutions Provider immediately as they are your first point of contact.

Unable to access Payment Services Website

If you cannot access the Payment Services Website to collect payment reports and update vital company information, then first check with your own IT administrator you are using the correct internet browser and operating system specifications.

If you still experience difficulty please contact Bacs Service Desk on 0370 165 0018 or visit our Frequently Asked Questions.


Changes are being made by the internet community will affect your access to Bacs via the Payment Services Website and Bacstel-IP. During this time changes to our own security which will also affect you.

It is important that you have taken action by the 19 September to prevent interruption to the Bacs services you use.

Below is information on what you will need to do, depending on how you access our services:

  • Direct submitter - if you submit directly to Bacs
  • Indirect submitter - if a Bacs Approved Bureau submits to Bacs on your behalf.

 

Direct submitter

Action:

  • Check with your Bacs Approved Software Solutions provider that your Bacstel-IP software currently supports, or will be upgraded to support, SHA-2 SSL certificates and TLS 1.1/1.2 by 19 September 2016 or before the next time you make a payment submission
  • If you access the Payment Services website, check with your IT provider that your browser and operating system support these security changes.

These changes are necessary because the internet community is adopting new security certification – called SHA-2 – which will affect the requirements for accessing secure services, like our Payment Services Website.

During this time we also withdrew support for older connection protocols to provide even more protection for the communications pipeline between Bacstel-IP / the Payment Services Website, and you, as the service user. From 19 September 2016 we will only support TLS 1.1 and 1.2.

Your existing smartcard, digital certificate and signing solution will be replaced in due course by your sponsoring bank with new ones which provide a higher level of security around the process that enables you to log on, or sign and submit Bacs files.

In order to ensure you can continue to access our services, we have designed the new system so that your old smartcard and signing solution will work until they are replaced. You should check with your Bacs Approved Software Solutions provider if this has any impact on your software.

For details of compatible web browsers, refer to the Information Hub to the right of your screen.

For more information visit the FAQs section.

Indirect submitter

Action:

  • If you log on to the Payment Services Website direct, for example to download your own reports, ask your IT provider to ensure you have a browser and operating system which will support SHA-2 SSL certificates and TLS1.1 / 1.2 by 19 September 2016
  • We would also suggest you speak to your bureau to ensure they are aware of the 19 September 2016 deadline to update their browser to one which will support SHA-2 SSL certificates and TLS1.1 / 1.2 by 19 September 2016.

These changes are necessary because the internet community is adopting new security certification – called SHA-2 – which will affect the requirements for accessing secure services, like our Payment Services Website.

During this time we also withdrew support for older connection protocols to provide even more protection for the communications pipeline between the Payment Services Website, and you, as the service user. From 19 September 2016 we will only support TLS 1.1 and 1.2.

If you access our Payment Services Website to download your Bacs reports, you will have either a smartcard or password log in details. Smartcards and signing solution will be replaced in due course by your sponsoring bank with ones which are compatible with these new more sophisticated levels of security; this will give you even more protection when accessing the Payment Services Website. If you access the services using a password, you will be prompted to change your password at the appropriate time. New passwords must be a minimum of eight characters.

In order to ensure you can continue to access our services, we have designed the new system so that your old smartcard and signing solution will work until it is replaced.

For details of compatible web browsers, refer to the Information Hub to the right of your screen.

For more information visit the FAQs section.

 

 
Information Hub
Minimize SHA-2
NOT REGISTERED YET? Some areas and assets are password protected and only available to eligible registered users. To gain access to all the information you need register for your password and log in first every visit REGISTER