In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jun 09, 2025 - 08:00 EDT
Scheduled - CardinalCommerce will be performing database system improvements starting at 12:00 UTC on June 9, 2025, through 23:59 UTC on June 12, 2025. During this time, we will apply the most recent network and database patches as well as targeted security enhancements to prevent new exploits from being used against our systems.
We perform monitoring and testing of the updates during Cardinal business hours, while we are fully staffed from a support and network operations standpoint.
This is being performed in a high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency.
Investigating - Subject: User Creation Errors in VCAS User Management Portal
We are reaching out to inform you of a temporary issue affecting the creation of new users in the VCAS User Management Portal. When trying to create a new user in the VCAS User Management Application, some users may encounter an error message: “Oops! There was an error while creating this user. Please try again later.” If you receive this message, please open a support ticket with your local VISA support team for assistance in creating the user.
Additionally, if you have successfully created a new user but they have not received the new user activation email, please ensure that your organization is not blocking emails from our no-reply address noreply@visaonline.com. Also, verify that the following IP addresses are not being blocked: • 198.241.162.22 • 198.241.162.12 • 198.241.168.120 • 198.241.168.121 • 198.241.162.10 • 198.241.162.56 • 198.241.168.128 • 198.241.168.129
Thank you for your understanding and cooperation. Please do not hesitate to contact your local VISA support if you have any questions or concerns.
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Feb 06, 2025 - 11:30 EST
Scheduled - The Visa Consumer Authentication Service (VCAS) will be migrated to Visa data centers in a phased approach beginning 1 July 2025 and ending 31 March 2026. VCAS users will need to take specific actions to complete the migration depending on the VCAS features and functionality they use today.
Visa will begin a phased migration of VCAS to Visa data centers beginning 1 July 2025 and ending 31 March 2026 to improve security, performance and resiliency by maximizing Visa's global scale and infrastructure. The specific actions needed to complete the migration will depend on which VCAS features and functionality are being used today. See the Client Impact and Required Actions section below for a summary of the current actions required based on the VCAS solution being used.
Key Dates • 1 July 2025: Start of phased VCAS customer migration • 31 March 2026: End of phased VCAS customer migration
VCAS Background
Visa acquired CardinalCommerce in 2017, and since then has built VCAS into a robust, state-of-the-art authentication solution.
The VCAS team is committed to handling the majority of the requirements in order to reduce the effort and resources needed for VCAS users to complete the migration. Visa will provide additional details in future communications on the migration plan and how VCAS users will be migrated in the most efficient and effective way possible.
Client Impact and Required Actions:
Trust new IP Ranges Continue to trust current IP addresses until the migration is complete
VCAS users that have integrated Real-time Data Exchange (RDX) or Authentication Data Exchange (ADX) APIs will need to trust new IP ranges. Please visit the Visa Support Hub (https://visasupporthub.visaonline.com/) and reference the Knowledge Article titled "VCAS Customer Data Center Migration" for the IP's and additional information.
Request a Project
VCAS users that utilize file transfer services (Secure File Transfer Protocol [SFTP] Reporting, File Processor or Bulk Confirmed Marking) will need to open a case using the Visa Support Hub under VCAS (https://visasupporthub.visaonline.com) via Visa Access (formerly Visa Online) or engage their Customer Success Manager (CSM) by 1 July 2025.
The objective of this project is to establish connectivity between the user’s system and the Visa File Exchange Service (VFES). A secondary project will be needed to complete the actual data center migration; this secondary project will include testing the files before sending traffic to the Visa data center. Prior to requesting a project, users should have the information listed below, as it is required to create a new Visa Access ID for VFES.
Account Owner (the person responsible for file transfer services in the user’s organization) and Manager (backup contact):
o Organization Name o Visa Business Identification (BID) number o Full Name (file delivery contact) o Job Title o Email Address o Business Address o Phone Number
Secure Shell (SSH) Keys:
o VFES requires SSH keys for authentication and securing communication. o If VCAS currently hosts the SFTP folders, users will need to create a public and private key pair per environment (Staging and Production). o If you currently host the SFTP folders, Visa will provide the SSH public key during your project.
Sign Up for Future Data Center Migration Updates Visa will use the following channels to communicate data center migration updates, and strongly recommends VCAS users subscribe to ensure receipt of migration-related communications and notifications.
VCAS Status Page / CardinalCommerce Status (https://cardinalcommercecorporation.statuspage.io): This status page is primarily used to communicate planned and unplanned events that may impact operational status.
Subscribe for updates to one or more of the following based on your VCAS solution: -VCAS Issuer Services -The Real-time Data Exchange (RDX) -File Processor -Authentication Data Exchange (ADX) -Reporting Extract -VCAS Portal
The visa.com Opt-in to VCAS updates today page (https://globalclient.visa.com/Opt-inToVCASUpdatesToday). This is primarily for new VCAS product information, updates and educational opportunities. Visa will also use this channel to communicate data center migration updates via email.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns.
CardinalCommerce will be performing network and database system maintenance starting at 12:00 UTC on June 12, 2025 through 12:00 UTC on June 16, 2025.
During this window we will apply the most recent network and database updates for optimal performance and to prevent new exploits from being used against our VCAS systems.
This is being performed in high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency. During this time, we will be fully staffed from a support and network operations standpoint to perform monitoring and testing.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns.
Completed -
The scheduled maintenance has been completed.
Jun 3, 07:30 EDT
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 14, 15:30 EDT
Scheduled -
VCAS Staging portal successfully completed migration to Visa Access (formerly Visa Online) earlier this month as planned. Access to VCAS Staging portal is now available through https://www.cte.visaonline.com/.
Starting on May 30, 2025, the VCAS Portal will complete its transition of its sign-in process to Visa Access for all external users in Production, completing by June 2, 2025 (previously scheduled for May 19, 2025). Post-migration, all VCAS users will access VCAS through the Visa Access URL: https://www.visaonline.com/login.
This change is driven by our commitment to maintaining the highest standards of security and compliance. With the new PCI 4.0 requirements going into effect in 2025, we are required to implement multifactor authentication (MFA) to remain PCI compliant and retain our PCI certification. By transitioning to Visa Access, we are not only meeting these compliance requirements but also enhancing your login experience with improved security and convenience.
Key Updates and Things to Know:
Freeze Period for New user creation and Existing User updates. Currently, new user accounts cannot be created, and existing VCAS user accounts are frozen and cannot be edited. Any user accounts that do not meet the criteria previously communicated (corporate email address on file and username minimum length requirement of 10 characters) will not be migrated on May 30th and will need to be created as a new user post-migration by the issuer Admin. As previously scheduled, issuers will be able to resume new user creation activities in the Production environment on May 19, 2025 at 5pm ET.
Editing Existing users-
VCAS Portal: Issuer Admins will not be able to edit existing users in the VCAS portal until June 2, 2025.
VEM: VEM Delegated Admins should not edit the Role for existing users (created as of May 16, 2025) entitled to VCAS until migration is complete on June 2, 2025.
New user creation and access. On May 19, 2025 Issuers will temporarily see two user management applications- ‘User Management’ and ‘Legacy User Management’ apps. Issuers will have access to creating new users in the User Management app in the existing VCAS Portal to facilitate this user creation process. Issuers will not be able to create or update users in the Legacy User Management application, as that functionality will remain shut off.
Important! Any new users created on May 19, 2025 or after will receive an activation email and must access the VCAS portal through Visa Access- these users will not have access to VCAS through the existing portal link supported today.
VEM Connectivity (Enablement- May 19, 2025): Some Issuers may leverage the Delegated Admin service through VEM for user creation. For the subset of issuers that do, please note additional considerations to the creation process. New VEM connectivity will be enabled on May 19, 2025, resulting in any new user created in VEM and entitled to VCAS to be automatically created in VCAS. VCAS Support team can complete the user’s set up in VCAS following a support ticket.
VEM Connectivity (Temporary Shut off- May 30, 2025): The VEM connectivity update to automatically create entitlement in VCAS will be temporarily shut off at 9pm ET on May 30, 2025 through June 1, 2025. New VCAS users originating in VEM can still be created but will not automatically trigger creation in VCAS. VCAS Support will not complete user set up for accounts created in VEM during this window to ensure a smooth final migration phase. VEM user creation and connectivity will resume on June 2, 2025, at which time any user created in VEM during this period can be completed by VCAS Support (if support ticket was submitted).
New Scheduled Go Live Date: Our new Go Live date is Monday, June 2, 2025 (previously May 19, 2025). At this time, all VCAS migrated and newly created users will be able to access the VCAS portal through Visa Access, and all user creation activities in the VCAS portal and VEM will resume.
First Time Login to VCAS Post-Migration:
The first-time login experience will depend on how your user account was migrated.
If you already had an active Visa Access account at the time of migration, you would log in at https://www.visaonline.com/login using your existing Visa Access account information. If not already set up, you will be prompted to set up your multi-factor authentication (MFA) preferences and security questions. Once login is complete, VCAS portal will be accessible in the My Services dashboard. Please see document VCAS Portal User Login Flows on Visa Access for more details on first time login.
If you did not have a Visa Access account at the time of migration, you will log in at https://www.visaonline.com/login using your current VCAS portal username and password. The VCAS username will become your Visa Access username. After entering your credentials, you will be prompted to complete the setup of your MFA preferences, security questions, and change your password. Once login is complete, VCAS portal will be accessible in the My Services dashboard. Please see document VCAS Portal User Login Flows on Visa Access for more details on first time login.
Note: Current Federated SSO VCAS issuers will maintain their current login process with Visa Access.
REMINDER- Impact to SFTP Reports: For customers receiving our VCAS SFTP reports today, please note the below reports will be impacted due to this migration:
User Access Report (UAR): The classifications related to a user's account status will be changed. The following new statuses will be reflected in the UAR: Pending, Active, Disabled, and Delete_Pending
Violation Report: This report will be unavailable for a period of time due to a limitation in the data that is currently sent in that report. We are working with the Visa Access team to evaluate when this report can be supported in the future. The current timeline is FY26.