In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Mar 10, 2025 - 15:30 EDT
Scheduled - Visa will be updating a set of VCAS staging and production root, intermediate and leaf certificates that are set to expire on April 20, 2025. To prevent disruption to services, we ask that you review your configuration immediately if you are using one of the certificates below associated with RDX, ADX, or Oauth connections.

The expiring STAGING leaf certificate details:

Common Name (CN): rdxstag.cardinalcommerce.com
Serial Number: 09:c4:9d:f4:ea:3e:1b:1e:88:70:ad:bc:3b:a7:38:da
Date of Replacement: March 11, 2025 10:00 EDT
Date of Expiry: April 20, 2025 18:59:59 EDT

The new STAGING leaf Visa Signed certificate details:

Common Name (CN): rdxstag.cardinalcommerce.com
Serial Number: 74:c5:06:03:3b:77:36:d5:36:fe:c7:30:d8:24:86:74
Date of Replacement: March 11, 2025 10:00 EDT
Date of Expiry: April 28, 2027 09:26:51 EDT

The expiring PRODUCTION leaf certificate details:

Common Name (CN): rdx.cardinalcommerce.com
Serial Number: 7a:52:88:3a:65:bf:81:a6:e6:89:98:a8:bd:a5:d1:b9
Date of Replacement: April 10, 2025 10:00 EDT
Date of Expiry: April 20, 2025 18:59:59 EDT

The new PRODUCTION Visa-signed certificate details:

Common Name (CN): rdx.cardinalcommerce.com
Serial Number: 39:4a:7d:cd:05:9f:4b:bf:07:cb:a1:37:36:92:d6:b6
Date of Replacement: April 10, 2025 10:00 EDT
Date of Expiry: May 5, 2027 09:33:30 EDT

The old CardinalCommerce Intermediate Certificate Details:
Common Name (CN): CardinalCommerce Issuing CA
Serial Number: 76:3a:5e:30:d2:05:6f:dc:8d:d4:65:7c:4c:83:99:f1

The old CardinalCommerce Root Certificate Details:
Common Name (CN): CardinalCommerce Root CA
Serial Number: 2d:a0:e3:db:0e:56:dc:79:e0:70:53:62:6a:7d:ca:8b

The new Visa Intermediate Certificate Details
Common Name (CN): Visa Information Delivery Internal Issuing CA G2
Serial Number: 51:3e:96:00:00:00:8e:65:54:4b:3e:b1:2d:cd:1a

The new Visa Root Certificate Details:
Common Name (CN): Visa Corporate Root CA - G2
Serial Number: 51:3e:96:00:00:00:6b:4e:81:30:23:be:66:05:f6

Customer Responsibilities:

The new certificate is issued by a different certificate authority. To ensure proper connection, you will need to install the new intermediate and root certificates. The CardinalCommerce client certificate authority, used in MTLS connections will no longer be supported. Please contact your local VCAS support and/or account manager to coordinate this change.

If you require coordination, please contact your local VCAS support and/or account manager, we will schedule a time to switch over the leaf certificate. It is imperative that the migration occur before certificate expiration, otherwise RDX services will be impacted.

Testing – How can I test these changes?

Customers are encouraged to work with their network teams to ensure they can support these updated certificates.

No new parameters or fields are required for these changes.  If you do not trust the new certificate, you will be unable to connect to Cardinal endpoints receiving a connection timeout or certificate error response.

Please do not hesitate to contact your Local VISA support if you have any questions or concerns. Please refer to the knowledge article titled "Certificate Expiry Cardinal RDX CC Update 2025" on the Visa Support Hub for the full cert chain. You may also contact support or your account manager if you require the full Cert Chain.

VISA Local Support Channels by Region

Global and LAC - VISA Support Hub Portal (https://visasupporthub.visaonline.com)
AP - Isupport@visa.com
CEMEA - csupport@visa.com
EU - customersupport@visa.com
NA - esupport@visa.com

Mar 10, 2025 15:30 - Apr 19, 2025 08:30 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Mar 07, 2025 - 16:11 EST
Scheduled - Visa will be updating a set of staging and production leaf certificates that are set to expire on May 02, 2025. To prevent disruption to services, we ask that you review your configuration immediately.

The Leaf certificates that are expiring may be in use by VCAS to your endpoint as part of the mutual TLS (MTLS) handshake for RDX, ADX, or Oauth connections.

Please review the certs below to see if they are in use with your VCAS connection.

The expiring STAGING leaf certificate details:

Common Name (CN): rdxstag.cardinalcommerce.com
Serial Number: 0a86c117a3fef467682b740deef86f1c
Date of Replacement: March 18, 2025 10:00 EDT
Date of Expiry: May 02, 2025 18:59:59 EDT

The new STAGING leaf certificate details:

Common Name (CN): rdxstag.cardinalcommerce.com
Serial Number: 0dd1c3f351d61449b0702f5ec0d14a47
Date of Replacement: March 18, 2025 10:00 EDT
Date of Expiry: March 28, 2026 18:59:50 EDT

The expiring PRODUCTION leaf certificate details:

Common Name (CN): rdx.cardinalcommerce.com
Serial Number: 07ec4a5fc0d1c1049a1590b7d4788719
Date of Replacement: April 22, 2025 10:00 EDT
Date of Expiry: May 02, 2025 18:59:59 EDT

The new PRODUCTION leaf certificate details:

Common Name (CN): rdx.cardinalcommerce.com
Serial Number: 0ead8d09102f51d80fb614eec175f0a1
Date of Replacement: April 22, 2025 10:00 EDT
Date of Expiry: April 3, 2026 18:59:59 EDT

The Intermediate CA and Root CA will remain the same:

Intermediate Certificate Details:
Common Name (CN): DigiCert Global G2 TLS RSA SHA256 2020 CA1
Serial Number: 0cf5bd062b5602f47ab8502c23ccf066

Root Certificate Details:
Common Name (CN): DigiCert Global Root G2
Serial Number: 033af1e6a711a9a0bb2864b11d09fae5

Customer Responsibilities:

-If you trust on the leaf certificate, we will have to coordinate the switchover with your connection. Please contact your local VCAS support and/or account manager to coordinate this change.

-If you require coordination, we will schedule a time to switch over the leaf certificate. It is imperative that the migration occur before certificate expiration, otherwise RDX services will be impacted.

Testing – How can I test these changes?

Customers are encouraged to work with their network teams to ensure they can support the updated certificates.

No new parameters or fields are required for these changes.  If you do not trust the new certificate, you will be unable to connect to Cardinal endpoints receiving a connection timeout or certificate error response.

Please do not hesitate to contact your Local VISA support if you have any questions or concerns. Please refer to the knowledge article titled "DigiCert MTLS RDX Certificate Update" for the full cert chain. You may also contact support or your account manager if you require the full Cert Chain.

VISA Local Support Channels by Region

Global and LAC - VISA Support Hub Portal (https://visasupporthub.visaonline.com)
AP - Isupport@visa.com
CEMEA - csupport@visa.com
EU - customersupport@visa.com
NA - esupport@visa.com

Mar 7, 2025 16:11 - May 3, 2025 16:11 EDT
Update - Scheduled maintenance is still in progress. We will provide updates as necessary.
Feb 21, 2025 - 17:32 EST
Update - Scheduled maintenance is still in progress. We will provide updates as necessary.
Feb 21, 2025 - 17:17 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Feb 14, 2025 - 13:30 EST
Scheduled - CardinalCommerce will be updating a certificate that is set to expire on March 28, 2025. The leaf certificate will be updated on March 12, 2025. To prevent disruption to services, we ask that you review your configuration.

The certificate that is expiring is the wildcard server certificate used on most of Cardinal’s externally facing sites.

The expiring certificate details:

Common Name (CN): *.cardinalcommerce.com
Serial Number: 01:b4:5c:c8:c4:40:3b:fb:32:51:9c:13:02:2a:52:49
Date of Expiry: 03/28/2025

The new leaf certificate is:
Common Name (CN): *.cardinalcommerce.com
Serial Number: 0e:fe:06:35:d2:9c:9f:d5:6d:eb:af:2c:63:6d:84:b9
Date of Expiry: 03/24/2026
*Please request chain from our support team if needed

Intermediate Certificate Details (remain the same):
Common Name (CN): DigiCert Global G2 TLS RSA SHA256 2020 CA1
Serial Number: 0c:f5:bd:06:2b:56:02:f4:7a:b8:50:2c:23:cc:f0:66

Root Certificate Details:
Common Name (CN): DigiCert Global Root G2
Serial Number: 03:3a:f1:e6:a7:11:a9:a0:bb:28:64:b1:1d:09:fa:e5

Customer Responsibilities:

If you trust on the leaf certificate, you need to ensure the new server certificate is loaded in your trust store prior to March 12, 2025. 

It is imperative to perform testing and or migration before certificate replacement on March 12, 2025, otherwise services may be impacted.

When do these changes take place?

On Wednesday, March 5, 2025, at 10:00 AM EST Cardinal will update test environments so customers will have the ability to validate they can support the new certificate. 

The new certificate will be updated in our production environment on Wednesday March 12, 2025 at 10:00 AM EST.

Testing – How can I test these changes?

Customers are encouraged to work with their network teams to ensure they can support the updated certificates.

No new parameters or fields are required for these changes.  If you do not trust the new certificate, you will be unable to connect to Cardinal endpoints receiving a connection timeout or certificate error response.

For additional details on this update please reference the following article on the CardinalCommerce support hub (https://support.cardinalcommerce.com) titled "Wildcard Certificate Expiry 2025".

Contact Information:

Should you have any questions or concerns regarding this notice, please reach out to our support team at Support@cardinalcommerce.com.

We sincerely appreciate your attention to this matter and your continued trust in our services.

Feb 14, 2025 13:30 - Mar 30, 2025 09:30 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Feb 06, 2025 - 11:30 EST
Scheduled - The Visa Consumer Authentication Service (VCAS) will be migrated to Visa data centers in a phased approach beginning 1 July 2025 and ending 31 March 2026. VCAS users will need to take specific actions to complete the migration depending on the VCAS features and functionality they use today.

Visa will begin a phased migration of VCAS to Visa data centers beginning 1 July 2025 and ending 31 March 2026 to improve security, performance and resiliency by maximizing Visa's global scale and infrastructure.
The specific actions needed to complete the migration will depend on which VCAS features and functionality are being used today. See the Client Impact and Required Actions section below for a summary of the current actions required based on the VCAS solution being used.

Key Dates
• 1 July 2025: Start of phased VCAS customer migration
• 31 March 2026: End of phased VCAS customer migration

VCAS Background

Visa acquired CardinalCommerce in 2017, and since then has built VCAS into a robust, state-of-the-art authentication solution.

The VCAS team is committed to handling the majority of the requirements in order to reduce the effort and resources needed for VCAS users to complete the migration. Visa will provide additional details in future communications on the migration plan and how VCAS users will be migrated in the most efficient and effective way possible.

Client Impact and Required Actions:

Trust new IP Ranges
Continue to trust current IP addresses until the migration is complete

VCAS users that have integrated Real-time Data Exchange (RDX) or Authentication Data Exchange (ADX) APIs will need to trust new IP ranges. Please visit the Visa Support Hub (https://visasupporthub.visaonline.com/) and reference the Knowledge Article titled "VCAS Customer Data Center Migration" for the IP's and additional information.

Request a Project

VCAS users that utilize file transfer services (Secure File Transfer Protocol [SFTP] Reporting, File Processor or Bulk Confirmed Marking) will need to open a case using the Visa Support Hub under VCAS (https://visasupporthub.visaonline.com) via Visa Access (formerly Visa Online) or engage their Customer Success Manager (CSM) by 1 July 2025.

The objective of this project is to establish connectivity between the user’s system and the Visa File Exchange Service (VFES). A secondary project will be needed to complete the actual data center migration; this secondary project will include testing the files before sending traffic to the Visa data center. Prior to requesting a project, users should have the information listed below, as it is required to create a new Visa Access ID for VFES.

Account Owner (the person responsible for file transfer services in the user’s organization) and Manager (backup contact):

o Organization Name
o Visa Business Identification (BID) number
o Full Name (file delivery contact)
o Job Title
o Email Address
o Business Address
o Phone Number

Secure Shell (SSH) Keys:

o VFES requires SSH keys for authentication and securing communication.
o If VCAS currently hosts the SFTP folders, users will need to create a public and private key pair per environment (Staging and Production).
o If you currently host the SFTP folders, Visa will provide the SSH public key during your project.

Sign Up for Future Data Center Migration Updates
Visa will use the following channels to communicate data center migration updates, and strongly recommends VCAS users subscribe to ensure receipt of migration-related communications and notifications.

VCAS Status Page / CardinalCommerce Status (https://cardinalcommercecorporation.statuspage.io): This status page is primarily used to communicate planned and unplanned events that may impact operational status.

Subscribe for updates to one or more of the following based on your VCAS solution:
-VCAS Issuer Services
-The Real-time Data Exchange (RDX)
-File Processor
-Authentication Data Exchange (ADX)
-Reporting Extract
-VCAS Portal

The visa.com Opt-in to VCAS updates today page (https://globalclient.visa.com/Opt-inToVCASUpdatesToday). This is primarily for new VCAS product information, updates and educational opportunities. Visa will also use this channel to communicate data center migration updates via email.

Please do not hesitate to contact your Local VISA support if you have any questions or concerns.

VISA Local Support Channels by Region

Global and LAC - VISA Support Hub Portal (https://visasupporthub.visaonline.com)
AP - Isupport@visa.com
CEMEA - csupport@visa.com
EU - customersupport@visa.com
NA - esupport@visa.com

Feb 6, 2025 11:30 - Jul 1, 2025 09:30 EDT

About This Site

Welcome to the CardinalCommerce status page. We use this page to communicate any issues with our products including planned and unplanned outages.

Securing your transactions is our top priority.

Cardinal Consumer Authentication (3DS) ? Operational
Cardinal API ? Operational
Cardinal Hybrid API ? Operational
Merchant Portal ? Operational
VCAS Issuer Services ? Operational
The Real-time Data Exchange (RDX) ? Operational
File Processor ? Operational
Authentication Data Exchange (ADX) ? Operational
Reporting Extract ? Operational
VCAS Portal ? Operational
PayPal Operational
Status Page ? Operational
Operational
Degraded Performance
Partial Outage
Major Outage
Maintenance

Scheduled Maintenance

Cardinal introduces our new developer documentation site! Jan 7, 2025 15:00 - Jan 18, 2025 09:00 EST

We are excited to announce the launch of a newly redesigned website for Cardinal Consumer Authentication (CCA) Implementation guides! This update brings a more streamlined, user-friendly experience, offering a central hub for all our CCA product offerings & specifications. You can expect a more intuitive navigation, better filtering for CMPI messages, and easy access to critical resources like technical specifications and integration guides.

As part of this update, we’ve combined all of our CCA product offerings into one consolidated website, making it easier than ever to access the latest information about our products and services.

https://developer.cardinaltrusted.com/docs/welcome

With the link above, expect to see a new Cardinal Consumer Authentication Integration guide, better filtering for our CMPI messages, and a new look and feel across the site.

You can now access technical specifications in our new API Reference section (https://developer.cardinaltrusted.com/reference/data-exchange-api-reference) or go through detailed integration guides like Visa Payment Passkey (https://developer.cardinaltrusted.com/docs/fido-integration-guide).

This new site will be replacing our old site completely as of January 17, 2025. Cardinal recommends bookmarking the new URLs in the table below to get the most up to date information about our products and services.

Old URLs:
Cardinal Cruise API - Cardinal Cruise - Confluence (https://cardinaldocs.atlassian.net/wiki/spaces/CC/pages/805699644/Cardinal+Cruise+API)
Cardinal Mobile SDK - Confluence
(https://cardinaldocs.atlassian.net/wiki/spaces/CMSDK/overview)
Cardinal Centinel - Confluence
(https://cardinaldocs.atlassian.net/wiki/spaces/CCen/overview)

New URLs:
Cardinal Consumer Authentication
(https://developer.cardinaltrusted.com/docs/cruise-integration-guide)
IOS
(https://developer.cardinaltrusted.com/docs/ios-overview-and-release-notes)
Android
(https://developer.cardinaltrusted.com/docs/android-overview-and-release-notes)
Overview of CMPI
(https://developer.cardinaltrusted.com/reference/cmpi-messages)

For more information or if you have questions, contact your Cardinal representative.

Posted on Jan 07, 2025 - 14:09 EST

Centinel and Max Standard Network and Database Server Maintenance Apr 7, 2025 08:00 - Apr 10, 2025 20:00 EDT

CardinalCommerce will be performing database system improvements starting at 12:00 UTC on April 7, 2025, through 23:59 UTC on April 10, 2025. During this time, we will apply the most recent network and database patches as well as targeted security enhancements to prevent new exploits from being used against our systems.

We perform monitoring and testing of the updates during Cardinal business hours, while we are fully staffed from a support and network operations standpoint.

This is being performed in a high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency.

Please do not hesitate to contact support@cardinalcommerce.com or our support site (https://support.cardinalcommerce.com) if you have any questions or concerns.

Posted on Mar 24, 2025 - 09:25 EDT

VCAS/Issuer Services Standard Network and Database Server Maintenance Apr 10, 2025 08:00 - Apr 14, 2025 08:00 EDT

CardinalCommerce will be performing network and database system maintenance starting at 12:00 UTC on April 10, 2025, through 12:00 UTC on April 14, 2025.

During this window we will apply the most recent network and database updates for optimal performance and to prevent new exploits from being used against our VCAS systems.

This is being performed in high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency. During this time, we will be fully staffed from a support and network operations standpoint to perform monitoring and testing.

Please do not hesitate to contact your Local VISA support if you have any questions or concerns.

VISA Local Support Channels by Region

Global and LAC - VISA Support Hub Portal (https://visasupporthub.visaonline.com)
AP - Isupport@visa.com
CEMEA - csupport@visa.com
EU - customersupport@visa.com
NA - esupport@visa.com

Posted on Mar 24, 2025 - 09:28 EDT
Mar 28, 2025

No incidents reported today.

Mar 27, 2025

No incidents reported.

Mar 26, 2025

No incidents reported.

Mar 25, 2025

No incidents reported.

Mar 24, 2025

No incidents reported.

Mar 23, 2025

No incidents reported.

Mar 22, 2025

No incidents reported.

Mar 21, 2025

No incidents reported.

Mar 20, 2025

No incidents reported.

Mar 19, 2025

No incidents reported.

Mar 18, 2025

No incidents reported.

Mar 17, 2025
Completed - The scheduled maintenance has been completed.
Mar 17, 08:00 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Mar 13, 08:00 EDT
Scheduled - CardinalCommerce will be performing network and database system maintenance starting at 12:00 UTC on March 13, 2025, through 12:00 UTC on March 17, 2025.

During this window we will apply the most recent network and database updates for optimal performance and to prevent new exploits from being used against our VCAS systems.

This is being performed in high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency. During this time, we will be fully staffed from a support and network operations standpoint to perform monitoring and testing.

Please do not hesitate to contact your Local VISA support if you have any questions or concerns.

VISA Local Support Channels by Region

Global and LAC - VISA Support Hub Portal (https://visasupporthub.visaonline.com)
AP - Isupport@visa.com
CEMEA - csupport@visa.com
EU - customersupport@visa.com
NA - esupport@visa.com

Mar 2, 18:05 EST
Mar 16, 2025

No incidents reported.

Mar 15, 2025
Completed - The scheduled maintenance has been completed.
Mar 15, 12:00 EDT
Update - Scheduled maintenance is still in progress. We will provide updates as necessary.
Feb 11, 16:11 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Dec 12, 11:00 EST
Scheduled - Starting April 25, 2025, login to the VCAS Portal will transition to Visa Access (formerly known as Visa Online, or VOL) for enhanced security through Single Sign-On (SSO) and Multi-Factor Authentication (MFA). This change will provide a more secure and streamlined login experience.

Required Action

To ensure uninterrupted access to the VCAS Portal, Administrators must complete the following steps before April 11, 2025:

Update Usernames
• Usernames must meet the following new length restrictions:
o Minimum 10 characters
o Maximum 50 characters
• Usernames are limited to the following allowable characters:
o Alphanumeric
o Select special characters: dot (.), underscore (_), dash (-), apostrophe ('), commercial at (@)

Verify Email Addresses
• A valid corporate email address is now mandatory for all users to support multi-factor authentication (MFA). Personal email addresses will not be accepted (e.g. @gmail.com).
• Email addresses must be added to profiles that do not currently have one assigned.

Important Info
• All Admin users must complete these requirements on behalf of all active users before April 11, 2025.

Accounts that do not meet the new requirements by the deadline will not be included in the data migration process in April 2025. As a result, those users would need to have new accounts created for them in order to access the VCAS Portal post migration.

• Users already accessing the VCAS Portal through Visa Access will not be impacted by this migration and do not need to make any changes to their accounts.
• Once in Visa Access, VCAS will no longer have access to some data previously captured in our SFTP reports. Consequently, the Violation Report will be unavailable for a period of time following migration.

The VCAS team is exploring options to support this report in the future, and more information will be provided soon.
• Post-migration, the classifications related to a user’s account status will be changed.

These new statuses will be reflected in the User Access Report. Please refer to the VCAS SFTP File Specification to review the updated statuses.
• If SSO configuration to Visa Access is preferred, please contact the Visa Access team to initiate a project to enable federated SSO.

Need Help?

Additional resources for updating user accounts can be found in the Knowledge Article titled User Management Application user guide for users who have access to Visa Support Hub (via Visa Access). For all others, please contact your VCAS representative for access to the User Management user guide.

Please be on the lookout for more information about this migration coming out over the next several months.

Thank you for your cooperation in making this security enhancement successful.

* Please note that the scheduled migration date is subject to change. *

Please do not hesitate to contact your local VISA support team if you have any questions or concerns.

VISA Local Support Channels by Region
Global and LAC - VISA Support Hub Portal (https://visasupporthub.visaonline.com)
AP - Isupport@visa.com
CEMEA - csupport@visa.com
EU - customersupport@visa.com
NA - esupport@visa.com

Dec 12, 09:41 EST
Mar 14, 2025

No incidents reported.