CardinalCommerce will be performing database system improvements starting at 12:00 UTC on May 11, 2026, through 23:59 UTC on May 14, 2026. During this time, we will apply the most recent network and database patches as well as targeted security enhancements to prevent new exploits from being used against our systems.
We perform monitoring and testing of the updates during Cardinal business hours, while we are fully staffed from a support and network operations standpoint.
This is being performed in a high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency.
We appreciate your partnership as we continue improving the stability and security of our platform. If you have questions or would like support preparing for this change, our team is here to help.
CardinalCommerce will be performing network and database system maintenance starting at 12:00 UTC on May 14, 2026, through 12:00 UTC on May 18, 2026.
During this window we will apply the most recent network and database updates for optimal performance and to prevent new exploits from being used against our VCAS systems.
This is being performed in high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency. During this time, we will be fully staffed from a support and network operations standpoint to perform monitoring and testing.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns.
Completed -
The scheduled maintenance has been completed.
May 6, 19:30 EDT
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Apr 3, 16:30 EDT
Scheduled -
As part of our ongoing Centinel Data Center Migration, and as previously communicated, we are preparing to complete the Production DNS cutover that will transition remaining traffic to the Visa Data Center endpoints. To support a smooth transition and minimize disruption, we will continue to conduct controlled Production DNS “shock treatments" in April, followed by the final Production DNS cutover in early May. Please be advised that the dates referenced herein are subject to change and should any adjustments be required, we will provide timely notice.
Below is an overview of what to expect, key dates, and any actions required on your side.
What Will Occur and When:
April - May 2026 – Production DNS Shock Treatments These short duration activities are designed to validate client readiness and identify any remaining configuration issues prior to final cutover.
Date: April 8, 2026 Activity: Production DNS Shock Treatment #1 at 14:00 UTC Expected Duration ~30 minutes
Date: April 22, 2026 Activity: Production DNS Shock Treatment #2 at 14:00 UTC Expected Duration ~60 minutes
During these windows, traffic will temporarily be redirected to the new Visa endpoints (IP addresses). Clients who have not yet updated their integrations may experience brief processing interruptions during the shock treatment windows.
FINAL Date: May 6, 2026 - Full Production DNS cutover
Potential Client Actions Post Cutover (if not already completed): 1. Update all backend endpoints to use the Visa proxy domain (.cardinaltrusted.com). 2. Update IP allowlists / firewall rules to trust the new Production IP ranges. 3. Confirm your integration properly consumes response URLs returned dynamically (for DDC, Lookup, and Authenticate flows), rather than hardcoding legacy URLs. 4. Merchant Reporting Migration: Set up your Enterprise Business Center (EBC) access. Please refer to this communication for additional details: https://cardinalcommercecorporation.statuspage.io/incidents/3zvgvsh958mx
Support and Contacts
If you have questions, need assistance validating your readiness, or experience any issues during these activities please reach out to:
We appreciate your partnership as we complete this important milestone in the Centinel migration. Thank you for taking the necessary steps to ensure a smooth transition.
Completed -
The scheduled maintenance has been completed.
May 6, 18:00 EDT
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
May 5, 18:00 EDT
Scheduled -
As part of our ongoing Centinel Data Center Migration, and as previously communicated, we are preparing to complete the final Production DNS cutover on Wednesday, May 6th at 15:00 UTC. This cutover will transition all remaining traffic to the Visa Data Center endpoints.
Potential Client Actions Post Cutover (if not already completed): 1. Update all backend endpoints to use the Visa proxy domain (.cardinaltrusted.com). 2. Update IP allowlists / firewall rules to trust the new Production IP ranges. 3. Confirm your integration properly consumes response URLs returned dynamically (for DDC, Lookup, and Authenticate flows), rather than hardcoding legacy URLs. 4. Merchant Reporting Migration: Set up your Enterprise Business Center (EBC) access. Please refer to this communication for additional details: https://cardinalcommercecorporation.statuspage.io/incidents/3zvgvsh958mx
Support and Contacts:
If you have questions, need assistance validating your readiness, or experience any issues during these activities please reach out to:
2. Contact your Cardinal/Visa Client Success or Implementation Manager.
We appreciate your partnership as we complete this important milestone in the Centinel migration. Thank you for taking the necessary steps to ensure a smooth transition.
May 5, 15:49 EDT
Completed -
The scheduled maintenance has been completed.
May 6, 08:00 EDT
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Mar 30, 11:00 EDT
Scheduled -
As part of our ongoing platform updates, we are transitioning transaction reporting, user access management, and key management functions to the Enterprise Business Center (EBC). The EBC is Visa’s centralized portal where your team will be able to:
- View transaction reporting
- Manage users and permissions
- Securely generate and rotate API keys following production cutover
To ensure uninterrupted access to these capabilities, action is required from your team.
What to Do:
To get started, please open a Support ticket to establish access to the Enterprise Business Center (EBC). As part of this request, you will need to designate:
EBC Admin (Name/Email) – This individual will serve as your organization’s primary administrator for EBC and will be responsible for enrolling all subsequent users and assigning permissions.
Key Custodian (Name/Email) – This individual will manage API key generation and rotation for your organization within the EBC after production cutover.
If you currently use Cardinal’s Merchant Portal, completing this setup is important so your users can continue to access transaction reporting and manage keys without disruption.
Completed -
The scheduled maintenance has been completed.
Apr 29, 11:45 EDT
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Apr 1, 15:45 EDT
Scheduled -
Mastercard Directory Server Cutover Notification
Overview: As communicated in our February 6, 2025 Visa Business News (VBN-AI14914), VCAS Status Page, and VCAS Updates email, VCAS will be migrating to the Visa U.S. data centers. In February 2026, we successfully migrated 100% of our ACS URLs at the Visa Directory Server to the new Visa ACS URL within the Visa data centers. The new VCAS ACS URL and Method URL will start sending authentication requests through the Visa data center to the CardinalCommerce data center. Since authentication requests will still be processed at the Cardinal data center as they are today, there will be no change in your connection to VCAS. This first cutover will allow us to have more control, speed, flexibility, and reduce the risk of the actual data center migration for our customers later this year.
The next milestone of this migration is to update the Mastercard Directory Server on behalf of our customers with a new ACS URL and Method URL. We have been working closely with Mastercard to test the new ACS and Method URL as well as successfully pilot with a live customer.
Other Networks Update:
In regard to the other networks that will need to be updated with the new ACS URL and Method URL, please see the following updates. These are only applicable if you have a portfolio on VCAS for these networks:
Amex – Each customer will need to request their own ACS URL and Method URL with Amex - Action - Please reach out to your CSM to work with the VCAS Team to obtain your URLs JCB – Each customer will need to request their own ACS URL and Method URL with JCB - Action - Please reach out to your CSM to work with the VCAS Team to obtain your URLs Discover/Diners – Discover is working with us to mass update their Directory Server. We are currently looking for a pilot and will share more targeted updates as we have them - No action at this time ELO – ELO is working with us to mass update their Directory Server. We will share a more detailed and targeted update soon. - No action at this time UPI – UPI is working with us to mass update their Directory Server. We are currently looking for a pilot and will share more targeted updates as we have them - No action at this time EFTPOS – We are in discussion with EFTPOS to determine if any customer action is needed - No action at this time
Mastercard DS Update Schedule:
The Mastercard Directory Server ACS URL and Method URL update is scheduled for April 28, 2026. The cutover will start at 14:00 GMT and is expected to be updated in waves throughout the day with completion prior to the end of day.
Client Impact:
There is no action you need to take for the Mastercard Directory Server update.
After the Mastercard Directory Server cutover, instead of your cardholder’s authentication requests going directly to the CardinalCommerce data center, they will first go through the Visa data center (see diagram below). There is no impact on how you are integrated with VCAS today. The adjustments will take place between the Mastercard Directory Server and VCAS, changing the way transactions are initially routed to VCAS.
We are notifying you, our customer, so you can mark the date and perform additional monitoring if you would like. The Mastercard and VCAS Teams will be monitoring each of these cutovers to ensure a smooth transition. We do not expect there to be any downtime during this change. If there are any concerns, we will use our status page to communicate.
The first cutover is pointing the Directory Server through the Visa data center with a new ACS URL and Method URL. Once we start the data center migration (July 1st, 2026), we will work with you individually to move your traffic from processing at the Cardinal data center to the Visa data center.
Sign Up for Future Data Center Migration Updates:
Visa will use the following channels to communicate data center migration updates and strongly recommends VCAS users subscribe to ensure receipt of migration-related communications and notifications.
VCAS Status Page / CardinalCommerce Status (https://cardinalcommercecorporation.statuspage.io) : This status page is primarily used to communicate planned and unplanned events that may impact operational status.
The Visa.com Opt-in to VCAS updates page (https://globalclient.visa.com/Opt-inToVCASUpdatesToday) : This is primarily for new VCAS product information, updates and educational opportunities. Visa will also use this channel to communicate data center migration updates via email.
Reminder: Two Possible Readiness Actions Based on Your VCAS Solution
As a reminder, based on your VCAS solution, there are two potential readiness actions you need to take prior to July 1st, 2026.
Trust IP Ranges:
VCAS users that have integrated Real-time Data Exchange (RDX) or Authentication Data Exchange (ADX) APIs will need to:
Trust the following IP subnet ranges (preferred): o 198.241.177.0/24 o 198.241.169.0/24 If the full IP ranges cannot be trusted, the below IPs should be trusted (minimum requirement): o 198.241.177.108 o 198.241.177.109 o 198.241.169.24 o 198.241.169.34 Continue to trust current IP addresses until the migration is complete o 198.217.252.0/24 o 198.217.253.0/24 VCAS will be conducting tests throughout the Readiness and Migration Phases to ensure our customers are trusting the new IPs. Please do not block the IPs if you see connectivity trusts.
Request a Project
VCAS users that use file transfer services (Secure File Transfer Protocol [SFTP] Reporting, File Processor or Bulk Confirmed Marking will need to request a project using the Visa Support Hub (https://visasupporthub.visaonline.com) via Visa Access (formerly Visa Online) or their Customer Success Manager (CSM).
The objective of this project is to establish connectivity between the user’s system and the Visa File Exchange Service (VFES) prior to the migration start date.