VCAS/Issuer Services Standard Network and Database Server Maintenance
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jan 15, 2026 - 08:00 EST
Scheduled - CardinalCommerce will be performing network and database system maintenance starting at 12:00 UTC on January 15, 2026 through 12:00 UTC on January 19, 2026.

During this window we will apply the most recent network and database updates for optimal performance and to prevent new exploits from being used against our VCAS systems.

This is being performed in high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency. During this time, we will be fully staffed from a support and network operations standpoint to perform monitoring and testing.

Please do not hesitate to contact your Local VISA support if you have any questions or concerns.

VISA Local Support Channels by Region

Global and LAC - VISA Support Hub Portal (https://visasupporthub.visaonline.com)
AP - Isupport@visa.com
CEMEA - csupport@visa.com
EU - customersupport@visa.com
NA - esupport@visa.com
Jan 15, 2026 08:00 - Jan 19, 2026 08:00 EST
MANDATORY ACTION REQUIRED – Centinel Endpoint Migration (Data Center Migration)
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jan 08, 2026 - 00:00 EST
Scheduled - Dear Customer,

This is a critical service reminder from CardinalCommerce/Visa for Cardinal Consumer Authentication (CCA). You must migrate to the new CCA endpoints or trust new IPs to avoid service disruption.

Key Dates & Impact
NOVEMBER 14, 2025 - Effective this date, all CCA API keys have been mapped to support their use against the new Visa transaction endpoints. Please note this applies to both Staging/CAS and Production endpoints (".cardinaltrusted.com"). Clients will need to initiate migration as soon as possible to avoid key expiry.

JANUARY 07, 2026 – STAGING (Test) Environment Cutover will begin.
As previously communicated all legacy Cardinal endpoints are changing (https://developer.cardinaltrusted.com/docs/pilot-migration-program). All customers using trust listings for outbound traffic will need to include the following IP addresses:

--New for both STAG/PROD:
198.217.251.250
198.217.251.251
198.241.173.0/24
198.241.176.0/24

--Current/Legacy:
198.217.252.0/24 (East-Coast) - 198.217.252.23
198.217.253.0/24 (Mid-West) - 198.217.253.23

--Transaction processing in STAGING will break if migration to new endpoints is not completed.

MARCH 02, 2026 – PRODUCTION Environment Cutover
--Shortly after legacy STAGING is decommissioned, Legacy Cardinal Production endpoints will be decommissioned
--Contact Cardinal Support for assistance in configuring your Production account with us.
--You must complete migration in advance to avoid production customer transaction failures.

Immediate Next Steps
1. Email or call your CCA Implementation Manager or contact Support.
2. Schedule your migration and testing in STAGING now.
3. Confirm with CCA Implementation or Support when testing is complete so Production enablement can be performed.

Potential Consequences of Delaying Action
--Service disruption
--Inability to process transactions
--Potential business impact to your payment operations

Please act immediately — migration work can be done now, and our team is ready to assist. Update your transaction endpoints well ahead of the 2026 deadline to limit any risk of unintended disruption.

Please contact support@cardinalcommerce.com or our support site (https://support.cardinalcommerce.com) if you have any questions or concerns.
Jan 8, 2026 00:00 - Mar 9, 2026 01:00 EDT
Visa Consumer Authentication Service (VCAS) Customer Data Center Migration | Visa Directory Server Cutover Notification
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jan 07, 2026 - 11:30 EST
Scheduled - As communicated in our February 6, 2025 Visa Business News (VBN-AI14914), VCAS Status Page, and VCAS Updates email, VCAS will be migrating to the Visa U.S. data centers. The next milestone of this migration is to update the Visa Directory Server on behalf of our customers with a new ACS URL and Method URL. The new VCAS ACS URL and Method URL will start sending authentication requests through the Visa data center to the CardinalCommerce data center. Since authentication requests will still be processed at the Cardinal data center as they are today, there will be no change to your connection to VCAS. This first cutover will allow us to have more control, speed, flexibility, and reduce the risk of the actual data center migration for our customers later this year.

There will be additional communications on the other networks we support: Mastercard, Discover, ELO, eftpos, UPI, American Express, and JCB.

There is no action you need to take for the Visa Directory Server update.

After the Visa Directory Server cutover (dates listed below), instead of your cardholder’s authentication requests going directly to the CardinalCommerce data center, they will first go through the Visa data center (see diagram below). There is no impact on how you are integrated with VCAS today. The adjustments will take place between the Visa Directory Server and VCAS, changing the way transactions are initially routed to VCAS.

We are notifying you, our customer, so you can mark the date based on your region and perform additional monitoring, if you would like. The Visa and VCAS Teams will be monitoring each of these cutovers to ensure a smooth transition. We do not expect there to be any downtime during this change. If there are any concerns, we will use our status page to communicate.

Visa Directory Server Update Dates

LAC:
February 3rd, 2026
February 5th, 2026

AP:
February 10th, 2026
February 12th, 2026

CEMEA:
February 17th, 2026

NA:
February 24th, 2026

All (any remaining ranges not cutover yet):
March 5th, 2026

Visa will use the following channels to communicate data center migration updates and strongly recommends VCAS users subscribe to ensure receipt of migration-related communications and notifications.

•VCAS Status Page / CardinalCommerce Status (https://cardinalcommercecorporation.statuspage.io): This status page is primarily used to communicate planned and unplanned events that may impact operational status.

•The Visa.com Opt-in to VCAS updates page (https://globalclient.visa.com/Opt-inToVCASUpdatesToday): This is primarily for new VCAS product information, updates and educational opportunities. Visa will also use this channel to communicate data center migration updates via email.

Reminder: Two Possible Readiness Actions Based on Your VCAS Solution

As a reminder, based on your VCAS solution, there are two potential readiness actions you need to take prior to July 1st, 2026.

Trust IP Ranges
VCAS users that have integrated Real-time Data Exchange (RDX) or Authentication Data Exchange (ADX) APIs will need to:

•Trust the following IP subnet ranges (preferred):
198.241.177.0/24
198.241.169.0/24

•If the full IP ranges cannot be trusted, the below IPs should be trusted (minimum requirement):
198.241.177.108
198.241.177.109
198.241.169.24
198.241.169.34

•Continue to trust current IP addresses until the migration is complete
198.217.252.0/24
198.217.253.0/24

•VCAS will be conducting tests throughout the Readiness and Migration Phases to ensure our customers are trusting the new IPs. Please do not block the IPs if you see connectivity trusts.

Request a Project

VCAS users that use file transfer services (Secure File Transfer Protocol [SFTP] Reporting, File Processor or Bulk Confirmed Marking will need to request a project using the Visa Support Hub (https://visasupporthub.visaonline.com) via Visa Access (formerly Visa Online) or their Customer Success Manager (CSM).

The objective of this project is to establish connectivity between the user’s system and the Visa File Exchange Service (VFES). A secondary project will be needed to complete the actual data center migration; this secondary project will include testing the files before sending traffic to the Visa data center.

Visit the Visa Support Hub to search for answers to your questions and create a case, if needed. Otherwise:

• Global and LAC – Visa Support Hub Portal (https://visasupporthub.visaonline.com)
• AP - Isupport@visa.com
• CEMEA - csupport@visa.com
• EU - customersupport@visa.com
• NA - esupport@visa.com
Jan 7, 2026 11:30 - Mar 12, 2026 08:30 EDT

About This Site

Welcome to the CardinalCommerce status page. We use this page to communicate any issues with our products including planned and unplanned outages.

Securing your transactions is our top priority.

Cardinal Consumer Authentication (3DS) Operational
Cardinal API Operational
Cardinal Hybrid API Operational
Merchant Portal Operational
VCAS Issuer Services Under Maintenance
The Real-time Data Exchange (RDX) Under Maintenance
File Processor Under Maintenance
Authentication Data Exchange (ADX) Under Maintenance
Reporting Extract Under Maintenance
VCAS Portal Under Maintenance
PayPal Operational
Status Page Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance
Jan 16, 2026

No incidents reported today.

Jan 15, 2026
Centinel and Max Standard Network and Database Server Maintenance
Completed - The scheduled maintenance has been completed.
Jan 15, 20:00 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Jan 12, 08:00 EST
Scheduled - CardinalCommerce will be performing database system improvements starting at 12:00 UTC on January 12, 2026, through 23:59 UTC on January 15, 2026. During this time, we will apply the most recent network and database patches as well as targeted security enhancements to prevent new exploits from being used against our systems.

We perform monitoring and testing of the updates during Cardinal business hours, while we are fully staffed from a support and network operations standpoint.

This is being performed in a high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency.

In addition, as part of our ongoing preparation for the Centinel Endpoint Migration previously communicated in November 2025 (https://cardinalcommercecorporation.statuspage.io/incidents/6x4q77c2yg33) we will be performing a brief cutover to the new IP's on January 14, 2026.

We appreciate your partnership as we continue improving the stability and security of our platform. If you have questions or would like support preparing for this change, our team is here to help.

Please do not hesitate to contact support@cardinalcommerce.com or our support site (https://support.cardinalcommerce.com) if you have any questions or concerns.
Jan 5, 15:07 EST
Jan 14, 2026

No incidents reported.

Jan 13, 2026

No incidents reported.

Jan 12, 2026
Jan 11, 2026

No incidents reported.

Jan 10, 2026

No incidents reported.

Jan 9, 2026

No incidents reported.

Jan 8, 2026

Unresolved incident: MANDATORY ACTION REQUIRED – Centinel Endpoint Migration (Data Center Migration).

Jan 7, 2026

Unresolved incident: Visa Consumer Authentication Service (VCAS) Customer Data Center Migration | Visa Directory Server Cutover Notification.

Jan 6, 2026
Visa Consumer Authentication Service (VCAS) Customer Data Center Migration-Important Updates
Completed - The scheduled maintenance has been completed.
Jan 6, 16:43 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Aug 29, 10:00 EDT
Scheduled - As originally communicated in our February 2025 Visa Business News (VBN-AI14914), VCAS Status Page, and VCAS Updates email, VCAS will be migrating to the Visa U.S. data centers.

This notice informed customers that, to prepare for the migration, they should either connect to the Visa File Exchange Service (VFES) or allow the new IP addresses, depending on their VCAS solution. In a subsequent customer webinar in April 2025, we reviewed the entire migration plan from readiness to completion, providing details on each action and the overall strategy for migrating customers.

Important Update

The target start date for the data center migration has been moved to July 1st, 2026, with the revised target end date set for September 1st, 2027.

Previously, our last communication advised that the migration would begin October 1st, 2025 and conclude by June 30, 2026. These adjustments have been made to allow more time for customer readiness and technical preparations.

We believe the revised timelines will give customers and technology teams enough time to ensure everyone is ready and the migration happens as smoothly as possible. With a migration of this size and nature, it is imperative that we focus on moving our customer’s traffic with no disruption.

Client Impact

As we are still in the Readiness Phase, the revised timeline is not expected to impact customers. Any planning or work that has already been completed remains valid to meet the new date.

Action Required

The requirements around connecting to VFES and/or trusting the new IP addresses must happen regardless of when the target migration start date is. For customers that have completed these actions, you are ready for the migration. For customers that haven’t, please act as soon as possible so we can ensure your readiness prior to the start date.

Directory Server Update (Cutover #1)

In the April 2025 customer webinar, we explained the need to update each network Directory Server with a new VCAS ACS URL and Method URL as a way for us to have more control when it comes time to migrate data centers. Having more control allows us to have increased speed, flexibility, and the ability to reduce risk.

For most networks, we’ve gained their agreement to work with us to migrate the ACS URL and Method URL on behalf of our customers so there is no additional customer action needed. For a couple of networks, there will be customer action as the network requires the customer to make the request, but this will be communicated at a later date.

We will start with updating the Visa Directory Server (DS) for Europe in September 2025, ahead of the holiday season. A separate communication will be sent to EU customers with further details. For all other regions, the Visa DS update is scheduled to begin after the New Year. We will share specific dates and rollout plans in January to ensure adequate time to prepare.

For the other non-Visa networks, we will begin scheduling these after the Visa DS has been fully updated with the new VCAS ACS URL and Method URL. Further communication will follow with specifics for each network.

Action Reminders from the previous notification

Trust IP Ranges
VCAS users that have integrated Real-time Data Exchange (RDX) or Authentication Data Exchange (ADX) APIs will need to:

Trust the following IP subnet ranges (preferred):
o 198.241.177.0/24
o 198.241.169.0/24
If the full IP ranges cannot be trusted, the below IPs should be trusted (minimum requirement):
o 198.241.177.108
o 198.241.177.109
o 198.241.169.24
o 198.241.169.34

Continue to trust current IP addresses until the migration is complete.
VCAS will be conducting tests throughout the Readiness and Migration phases to ensure our customer are trusting the new IPs. Please do not block the IPs if you see connectivity trusts.

Request a Project

VCAS users that use file transfer services (Secure File Transfer Protocol [SFTP] Reporting, File Processor or Bulk Confirmed Marking) will need to request a project using the Visa Support Hub (https://visasupporthub.visaonline.com/) via Visa Access (formerly Visa Online) or their Customer Success Manager (CSM).

The objective of this project is to establish connectivity between the user’s system and the Visa File Exchange Service (VFES). A secondary project will be needed to complete the actual data center migration; this secondary project will include testing the files before sending traffic to the Visa data center.

Sign Up for Future Data Center Migration Updates

Visa will use the following channels to communicate data center migration updates and strongly recommends VCAS users subscribe to ensure receipt of migration-related communications and notifications.

• VCAS Status Page / CardinalCommerce Status: This status page is primarily used to communicate planned and unplanned events that may impact operational status. (https://cardinalcommercecorporation.statuspage.io/)
• The Visa.com Opt-in to VCAS updates today page (https://globalclient.visa.com/Opt-inToVCASUpdatesToday): This is primarily for new VCAS product information, updates and educational opportunities. Visa will also use this channel to communicate data center migration updates via email.

Visit the Visa Support Hub (https://visasupporthub.visaonline.com) to search for answers to your questions and create a case, if needed. Otherwise, please do not hesitate to contact your Local VISA support if you have any questions or concerns.

VISA Local Support Channels by Region

Global and LAC - VISA Support Hub Portal (https://visasupporthub.visaonline.com)
AP - Isupport@visa.com
CEMEA - csupport@visa.com
EU - customersupport@visa.com
NA - esupport@visa.com
Aug 29, 09:45 EDT
Jan 5, 2026

No incidents reported.

Jan 4, 2026

No incidents reported.

Jan 3, 2026

No incidents reported.

Jan 2, 2026

No incidents reported.

← Incident History Powered by Atlassian Statuspage