In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Mar 10, 2025 - 15:30 EDT
Scheduled - Visa will be updating a set of VCAS staging and production root, intermediate and leaf certificates that are set to expire on April 20, 2025. To prevent disruption to services, we ask that you review your configuration immediately if you are using one of the certificates below associated with RDX, ADX, or Oauth connections.
The expiring STAGING leaf certificate details:
Common Name (CN): rdxstag.cardinalcommerce.com Serial Number: 09:c4:9d:f4:ea:3e:1b:1e:88:70:ad:bc:3b:a7:38:da Date of Replacement: March 11, 2025 10:00 EDT Date of Expiry: April 20, 2025 18:59:59 EDT
The new STAGING leaf Visa Signed certificate details:
Common Name (CN): rdxstag.cardinalcommerce.com Serial Number: 74:c5:06:03:3b:77:36:d5:36:fe:c7:30:d8:24:86:74 Date of Replacement: March 11, 2025 10:00 EDT Date of Expiry: April 28, 2027 09:26:51 EDT
The expiring PRODUCTION leaf certificate details:
Common Name (CN): rdx.cardinalcommerce.com Serial Number: 7a:52:88:3a:65:bf:81:a6:e6:89:98:a8:bd:a5:d1:b9 Date of Replacement: April 10, 2025 10:00 EDT Date of Expiry: April 20, 2025 18:59:59 EDT
The new PRODUCTION Visa-signed certificate details:
Common Name (CN): rdx.cardinalcommerce.com Serial Number: 39:4a:7d:cd:05:9f:4b:bf:07:cb:a1:37:36:92:d6:b6 Date of Replacement: April 10, 2025 10:00 EDT Date of Expiry: May 5, 2027 09:33:30 EDT
The old CardinalCommerce Intermediate Certificate Details: Common Name (CN): CardinalCommerce Issuing CA Serial Number: 76:3a:5e:30:d2:05:6f:dc:8d:d4:65:7c:4c:83:99:f1
The old CardinalCommerce Root Certificate Details: Common Name (CN): CardinalCommerce Root CA Serial Number: 2d:a0:e3:db:0e:56:dc:79:e0:70:53:62:6a:7d:ca:8b
The new Visa Intermediate Certificate Details Common Name (CN): Visa Information Delivery Internal Issuing CA G2 Serial Number: 51:3e:96:00:00:00:8e:65:54:4b:3e:b1:2d:cd:1a
The new Visa Root Certificate Details: Common Name (CN): Visa Corporate Root CA - G2 Serial Number: 51:3e:96:00:00:00:6b:4e:81:30:23:be:66:05:f6
Customer Responsibilities:
The new certificate is issued by a different certificate authority. To ensure proper connection, you will need to install the new intermediate and root certificates. The CardinalCommerce client certificate authority, used in MTLS connections will no longer be supported. Please contact your local VCAS support and/or account manager to coordinate this change.
If you require coordination, please contact your local VCAS support and/or account manager, we will schedule a time to switch over the leaf certificate. It is imperative that the migration occur before certificate expiration, otherwise RDX services will be impacted.
Testing – How can I test these changes?
Customers are encouraged to work with their network teams to ensure they can support these updated certificates.
No new parameters or fields are required for these changes. If you do not trust the new certificate, you will be unable to connect to Cardinal endpoints receiving a connection timeout or certificate error response.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns. Please refer to the knowledge article titled "Certificate Expiry Cardinal RDX CC Update 2025" on the Visa Support Hub for the full cert chain. You may also contact support or your account manager if you require the full Cert Chain.
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Mar 07, 2025 - 16:11 EST
Scheduled - Visa will be updating a set of staging and production leaf certificates that are set to expire on May 02, 2025. To prevent disruption to services, we ask that you review your configuration immediately.
The Leaf certificates that are expiring may be in use by VCAS to your endpoint as part of the mutual TLS (MTLS) handshake for RDX, ADX, or Oauth connections.
Please review the certs below to see if they are in use with your VCAS connection.
The expiring STAGING leaf certificate details:
Common Name (CN): rdxstag.cardinalcommerce.com Serial Number: 0a86c117a3fef467682b740deef86f1c Date of Replacement: March 18, 2025 10:00 EDT Date of Expiry: May 02, 2025 18:59:59 EDT
The new STAGING leaf certificate details:
Common Name (CN): rdxstag.cardinalcommerce.com Serial Number: 0dd1c3f351d61449b0702f5ec0d14a47 Date of Replacement: March 18, 2025 10:00 EDT Date of Expiry: March 28, 2026 18:59:50 EDT
The expiring PRODUCTION leaf certificate details:
Common Name (CN): rdx.cardinalcommerce.com Serial Number: 07ec4a5fc0d1c1049a1590b7d4788719 Date of Replacement: April 22, 2025 10:00 EDT Date of Expiry: May 02, 2025 18:59:59 EDT
The new PRODUCTION leaf certificate details:
Common Name (CN): rdx.cardinalcommerce.com Serial Number: 0ead8d09102f51d80fb614eec175f0a1 Date of Replacement: April 22, 2025 10:00 EDT Date of Expiry: April 3, 2026 18:59:59 EDT
The Intermediate CA and Root CA will remain the same:
Intermediate Certificate Details: Common Name (CN): DigiCert Global G2 TLS RSA SHA256 2020 CA1 Serial Number: 0cf5bd062b5602f47ab8502c23ccf066
Root Certificate Details: Common Name (CN): DigiCert Global Root G2 Serial Number: 033af1e6a711a9a0bb2864b11d09fae5
Customer Responsibilities:
-If you trust on the leaf certificate, we will have to coordinate the switchover with your connection. Please contact your local VCAS support and/or account manager to coordinate this change.
-If you require coordination, we will schedule a time to switch over the leaf certificate. It is imperative that the migration occur before certificate expiration, otherwise RDX services will be impacted.
Testing – How can I test these changes?
Customers are encouraged to work with their network teams to ensure they can support the updated certificates.
No new parameters or fields are required for these changes. If you do not trust the new certificate, you will be unable to connect to Cardinal endpoints receiving a connection timeout or certificate error response.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns. Please refer to the knowledge article titled "DigiCert MTLS RDX Certificate Update" for the full cert chain. You may also contact support or your account manager if you require the full Cert Chain.
Update - Scheduled maintenance is still in progress. We will provide updates as necessary.
Feb 21, 2025 - 17:32 EST
Update - Scheduled maintenance is still in progress. We will provide updates as necessary.
Feb 21, 2025 - 17:17 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Feb 14, 2025 - 13:30 EST
Scheduled - CardinalCommerce will be updating a certificate that is set to expire on March 28, 2025. The leaf certificate will be updated on March 12, 2025. To prevent disruption to services, we ask that you review your configuration.
The certificate that is expiring is the wildcard server certificate used on most of Cardinal’s externally facing sites.
The expiring certificate details:
Common Name (CN): *.cardinalcommerce.com Serial Number: 01:b4:5c:c8:c4:40:3b:fb:32:51:9c:13:02:2a:52:49 Date of Expiry: 03/28/2025
The new leaf certificate is: Common Name (CN): *.cardinalcommerce.com Serial Number: 0e:fe:06:35:d2:9c:9f:d5:6d:eb:af:2c:63:6d:84:b9 Date of Expiry: 03/24/2026 *Please request chain from our support team if needed
Intermediate Certificate Details (remain the same): Common Name (CN): DigiCert Global G2 TLS RSA SHA256 2020 CA1 Serial Number: 0c:f5:bd:06:2b:56:02:f4:7a:b8:50:2c:23:cc:f0:66
Root Certificate Details: Common Name (CN): DigiCert Global Root G2 Serial Number: 03:3a:f1:e6:a7:11:a9:a0:bb:28:64:b1:1d:09:fa:e5
Customer Responsibilities:
If you trust on the leaf certificate, you need to ensure the new server certificate is loaded in your trust store prior to March 12, 2025.
It is imperative to perform testing and or migration before certificate replacement on March 12, 2025, otherwise services may be impacted.
When do these changes take place?
On Wednesday, March 5, 2025, at 10:00 AM EST Cardinal will update test environments so customers will have the ability to validate they can support the new certificate.
The new certificate will be updated in our production environment on Wednesday March 12, 2025 at 10:00 AM EST.
Testing – How can I test these changes?
Customers are encouraged to work with their network teams to ensure they can support the updated certificates.
No new parameters or fields are required for these changes. If you do not trust the new certificate, you will be unable to connect to Cardinal endpoints receiving a connection timeout or certificate error response.
For additional details on this update please reference the following article on the CardinalCommerce support hub (https://support.cardinalcommerce.com) titled "Wildcard Certificate Expiry 2025".
Contact Information:
Should you have any questions or concerns regarding this notice, please reach out to our support team at Support@cardinalcommerce.com.
We sincerely appreciate your attention to this matter and your continued trust in our services.
Feb 14, 202513:30 - Mar 30, 202509:30 EDT
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Feb 06, 2025 - 11:30 EST
Scheduled - The Visa Consumer Authentication Service (VCAS) will be migrated to Visa data centers in a phased approach beginning 1 July 2025 and ending 31 March 2026. VCAS users will need to take specific actions to complete the migration depending on the VCAS features and functionality they use today.
Visa will begin a phased migration of VCAS to Visa data centers beginning 1 July 2025 and ending 31 March 2026 to improve security, performance and resiliency by maximizing Visa's global scale and infrastructure. The specific actions needed to complete the migration will depend on which VCAS features and functionality are being used today. See the Client Impact and Required Actions section below for a summary of the current actions required based on the VCAS solution being used.
Key Dates • 1 July 2025: Start of phased VCAS customer migration • 31 March 2026: End of phased VCAS customer migration
VCAS Background
Visa acquired CardinalCommerce in 2017, and since then has built VCAS into a robust, state-of-the-art authentication solution.
The VCAS team is committed to handling the majority of the requirements in order to reduce the effort and resources needed for VCAS users to complete the migration. Visa will provide additional details in future communications on the migration plan and how VCAS users will be migrated in the most efficient and effective way possible.
Client Impact and Required Actions:
Trust new IP Ranges Continue to trust current IP addresses until the migration is complete
VCAS users that have integrated Real-time Data Exchange (RDX) or Authentication Data Exchange (ADX) APIs will need to trust new IP ranges. Please visit the Visa Support Hub (https://visasupporthub.visaonline.com/) and reference the Knowledge Article titled "VCAS Customer Data Center Migration" for the IP's and additional information.
Request a Project
VCAS users that utilize file transfer services (Secure File Transfer Protocol [SFTP] Reporting, File Processor or Bulk Confirmed Marking) will need to open a case using the Visa Support Hub under VCAS (https://visasupporthub.visaonline.com) via Visa Access (formerly Visa Online) or engage their Customer Success Manager (CSM) by 1 July 2025.
The objective of this project is to establish connectivity between the user’s system and the Visa File Exchange Service (VFES). A secondary project will be needed to complete the actual data center migration; this secondary project will include testing the files before sending traffic to the Visa data center. Prior to requesting a project, users should have the information listed below, as it is required to create a new Visa Access ID for VFES.
Account Owner (the person responsible for file transfer services in the user’s organization) and Manager (backup contact):
o Organization Name o Visa Business Identification (BID) number o Full Name (file delivery contact) o Job Title o Email Address o Business Address o Phone Number
Secure Shell (SSH) Keys:
o VFES requires SSH keys for authentication and securing communication. o If VCAS currently hosts the SFTP folders, users will need to create a public and private key pair per environment (Staging and Production). o If you currently host the SFTP folders, Visa will provide the SSH public key during your project.
Sign Up for Future Data Center Migration Updates Visa will use the following channels to communicate data center migration updates, and strongly recommends VCAS users subscribe to ensure receipt of migration-related communications and notifications.
VCAS Status Page / CardinalCommerce Status (https://cardinalcommercecorporation.statuspage.io): This status page is primarily used to communicate planned and unplanned events that may impact operational status.
Subscribe for updates to one or more of the following based on your VCAS solution: -VCAS Issuer Services -The Real-time Data Exchange (RDX) -File Processor -Authentication Data Exchange (ADX) -Reporting Extract -VCAS Portal
The visa.com Opt-in to VCAS updates today page (https://globalclient.visa.com/Opt-inToVCASUpdatesToday). This is primarily for new VCAS product information, updates and educational opportunities. Visa will also use this channel to communicate data center migration updates via email.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns.
We are excited to announce the launch of a newly redesigned website for Cardinal Consumer Authentication (CCA) Implementation guides! This update brings a more streamlined, user-friendly experience, offering a central hub for all our CCA product offerings & specifications. You can expect a more intuitive navigation, better filtering for CMPI messages, and easy access to critical resources like technical specifications and integration guides.
As part of this update, we’ve combined all of our CCA product offerings into one consolidated website, making it easier than ever to access the latest information about our products and services.
With the link above, expect to see a new Cardinal Consumer Authentication Integration guide, better filtering for our CMPI messages, and a new look and feel across the site.
This new site will be replacing our old site completely as of January 17, 2025. Cardinal recommends bookmarking the new URLs in the table below to get the most up to date information about our products and services.
CardinalCommerce will be performing database system improvements starting at 12:00 UTC on April 7, 2025, through 23:59 UTC on April 10, 2025. During this time, we will apply the most recent network and database patches as well as targeted security enhancements to prevent new exploits from being used against our systems.
We perform monitoring and testing of the updates during Cardinal business hours, while we are fully staffed from a support and network operations standpoint.
This is being performed in a high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency.
CardinalCommerce will be performing network and database system maintenance starting at 12:00 UTC on April 10, 2025, through 12:00 UTC on April 14, 2025.
During this window we will apply the most recent network and database updates for optimal performance and to prevent new exploits from being used against our VCAS systems.
This is being performed in high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency. During this time, we will be fully staffed from a support and network operations standpoint to perform monitoring and testing.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns.
Completed -
The scheduled maintenance has been completed.
Mar 17, 08:00 EDT
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Mar 13, 08:00 EDT
Scheduled -
CardinalCommerce will be performing network and database system maintenance starting at 12:00 UTC on March 13, 2025, through 12:00 UTC on March 17, 2025.
During this window we will apply the most recent network and database updates for optimal performance and to prevent new exploits from being used against our VCAS systems.
This is being performed in high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency. During this time, we will be fully staffed from a support and network operations standpoint to perform monitoring and testing.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns.
Completed -
The scheduled maintenance has been completed.
Mar 15, 12:00 EDT
Update -
Scheduled maintenance is still in progress. We will provide updates as necessary.
Feb 11, 16:11 EST
In progress -
Scheduled maintenance is currently in progress. We will provide updates as necessary.
Dec 12, 11:00 EST
Scheduled -
Starting April 25, 2025, login to the VCAS Portal will transition to Visa Access (formerly known as Visa Online, or VOL) for enhanced security through Single Sign-On (SSO) and Multi-Factor Authentication (MFA). This change will provide a more secure and streamlined login experience.
Required Action
To ensure uninterrupted access to the VCAS Portal, Administrators must complete the following steps before April 11, 2025:
Update Usernames • Usernames must meet the following new length restrictions: o Minimum 10 characters o Maximum 50 characters • Usernames are limited to the following allowable characters: o Alphanumeric o Select special characters: dot (.), underscore (_), dash (-), apostrophe ('), commercial at (@)
Verify Email Addresses • A valid corporate email address is now mandatory for all users to support multi-factor authentication (MFA). Personal email addresses will not be accepted (e.g. @gmail.com). • Email addresses must be added to profiles that do not currently have one assigned.
Important Info • All Admin users must complete these requirements on behalf of all active users before April 11, 2025.
Accounts that do not meet the new requirements by the deadline will not be included in the data migration process in April 2025. As a result, those users would need to have new accounts created for them in order to access the VCAS Portal post migration.
• Users already accessing the VCAS Portal through Visa Access will not be impacted by this migration and do not need to make any changes to their accounts. • Once in Visa Access, VCAS will no longer have access to some data previously captured in our SFTP reports. Consequently, the Violation Report will be unavailable for a period of time following migration.
The VCAS team is exploring options to support this report in the future, and more information will be provided soon. • Post-migration, the classifications related to a user’s account status will be changed.
These new statuses will be reflected in the User Access Report. Please refer to the VCAS SFTP File Specification to review the updated statuses. • If SSO configuration to Visa Access is preferred, please contact the Visa Access team to initiate a project to enable federated SSO.
Need Help?
Additional resources for updating user accounts can be found in the Knowledge Article titled User Management Application user guide for users who have access to Visa Support Hub (via Visa Access). For all others, please contact your VCAS representative for access to the User Management user guide.
Please be on the lookout for more information about this migration coming out over the next several months.
Thank you for your cooperation in making this security enhancement successful.
* Please note that the scheduled migration date is subject to change. *
Please do not hesitate to contact your local VISA support team if you have any questions or concerns.