Update - Scheduled maintenance is still in progress. We will provide updates as necessary.
Feb 11, 2025 - 16:11 EST
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Dec 12, 2024 - 11:00 EST
Scheduled - Starting April 25, 2025, login to the VCAS Portal will transition to Visa Access (formerly known as Visa Online, or VOL) for enhanced security through Single Sign-On (SSO) and Multi-Factor Authentication (MFA). This change will provide a more secure and streamlined login experience.
Required Action
To ensure uninterrupted access to the VCAS Portal, Administrators must complete the following steps before April 11, 2025:
Update Usernames • Usernames must meet the following new length restrictions: o Minimum 10 characters o Maximum 50 characters • Usernames are limited to the following allowable characters: o Alphanumeric o Select special characters: dot (.), underscore (_), dash (-), apostrophe ('), commercial at (@)
Verify Email Addresses • A valid corporate email address is now mandatory for all users to support multi-factor authentication (MFA). Personal email addresses will not be accepted (e.g. @gmail.com). • Email addresses must be added to profiles that do not currently have one assigned.
Important Info • All Admin users must complete these requirements on behalf of all active users before April 11, 2025.
Accounts that do not meet the new requirements by the deadline will not be included in the data migration process in April 2025. As a result, those users would need to have new accounts created for them in order to access the VCAS Portal post migration.
• Users already accessing the VCAS Portal through Visa Access will not be impacted by this migration and do not need to make any changes to their accounts. • Once in Visa Access, VCAS will no longer have access to some data previously captured in our SFTP reports. Consequently, the Violation Report will be unavailable for a period of time following migration.
The VCAS team is exploring options to support this report in the future, and more information will be provided soon. • Post-migration, the classifications related to a user’s account status will be changed.
These new statuses will be reflected in the User Access Report. Please refer to the VCAS SFTP File Specification to review the updated statuses. • If SSO configuration to Visa Access is preferred, please contact the Visa Access team to initiate a project to enable federated SSO.
Need Help?
Additional resources for updating user accounts can be found in the Knowledge Article titled User Management Application user guide for users who have access to Visa Support Hub (via Visa Access). For all others, please contact your VCAS representative for access to the User Management user guide.
Please be on the lookout for more information about this migration coming out over the next several months.
Thank you for your cooperation in making this security enhancement successful.
* Please note that the scheduled migration date is subject to change. *
Please do not hesitate to contact your local VISA support team if you have any questions or concerns.
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Feb 10, 2025 - 08:00 EST
Scheduled - CardinalCommerce will be performing database system improvements starting at 12:00 UTC on February 10, 2025, through 23:59 UTC on February 13, 2025. During this time, we will apply the most recent network and database patches as well as targeted security enhancements to prevent new exploits from being used against our systems.
We perform monitoring and testing of the updates during Cardinal business hours, while we are fully staffed from a support and network operations standpoint.
This is being performed in a high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency.
In progress - Scheduled maintenance is currently in progress. We will provide updates as necessary.
Feb 06, 2025 - 11:30 EST
Scheduled - The Visa Consumer Authentication Service (VCAS) will be migrated to Visa data centers in a phased approach beginning 1 July 2025 and ending 31 March 2026. VCAS users will need to take specific actions to complete the migration depending on the VCAS features and functionality they use today.
Visa will begin a phased migration of VCAS to Visa data centers beginning 1 July 2025 and ending 31 March 2026 to improve security, performance and resiliency by maximizing Visa's global scale and infrastructure. The specific actions needed to complete the migration will depend on which VCAS features and functionality are being used today. See the Client Impact and Required Actions section below for a summary of the current actions required based on the VCAS solution being used.
Key Dates • 1 July 2025: Start of phased VCAS customer migration • 31 March 2026: End of phased VCAS customer migration
VCAS Background
Visa acquired CardinalCommerce in 2017, and since then has built VCAS into a robust, state-of-the-art authentication solution.
The VCAS team is committed to handling the majority of the requirements in order to reduce the effort and resources needed for VCAS users to complete the migration. Visa will provide additional details in future communications on the migration plan and how VCAS users will be migrated in the most efficient and effective way possible.
Client Impact and Required Actions:
Trust new IP Ranges Continue to trust current IP addresses until the migration is complete
VCAS users that have integrated Real-time Data Exchange (RDX) or Authentication Data Exchange (ADX) APIs will need to trust new IP ranges. Please visit the Visa Support Hub (https://visasupporthub.visaonline.com/) and reference the Knowledge Article titled "VCAS Customer Data Center Migration" for the IP's and additional information.
Request a Project
VCAS users that utilize file transfer services (Secure File Transfer Protocol [SFTP] Reporting, File Processor or Bulk Confirmed Marking) will need to open a case using the Visa Support Hub under VCAS (https://visasupporthub.visaonline.com) via Visa Access (formerly Visa Online) or engage their Customer Success Manager (CSM) by 1 July 2025.
The objective of this project is to establish connectivity between the user’s system and the Visa File Exchange Service (VFES). A secondary project will be needed to complete the actual data center migration; this secondary project will include testing the files before sending traffic to the Visa data center. Prior to requesting a project, users should have the information listed below, as it is required to create a new Visa Access ID for VFES.
Account Owner (the person responsible for file transfer services in the user’s organization) and Manager (backup contact):
o Organization Name o Visa Business Identification (BID) number o Full Name (file delivery contact) o Job Title o Email Address o Business Address o Phone Number
Secure Shell (SSH) Keys:
o VFES requires SSH keys for authentication and securing communication. o If VCAS currently hosts the SFTP folders, users will need to create a public and private key pair per environment (Staging and Production). o If you currently host the SFTP folders, Visa will provide the SSH public key during your project.
Sign Up for Future Data Center Migration Updates Visa will use the following channels to communicate data center migration updates, and strongly recommends VCAS users subscribe to ensure receipt of migration-related communications and notifications.
VCAS Status Page / CardinalCommerce Status (https://cardinalcommercecorporation.statuspage.io): This status page is primarily used to communicate planned and unplanned events that may impact operational status.
Subscribe for updates to one or more of the following based on your VCAS solution: -VCAS Issuer Services -The Real-time Data Exchange (RDX) -File Processor -Authentication Data Exchange (ADX) -Reporting Extract -VCAS Portal
The visa.com Opt-in to VCAS updates today page (https://globalclient.visa.com/Opt-inToVCASUpdatesToday). This is primarily for new VCAS product information, updates and educational opportunities. Visa will also use this channel to communicate data center migration updates via email.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns.
We are excited to announce the launch of a newly redesigned website for Cardinal Consumer Authentication (CCA) Implementation guides! This update brings a more streamlined, user-friendly experience, offering a central hub for all our CCA product offerings & specifications. You can expect a more intuitive navigation, better filtering for CMPI messages, and easy access to critical resources like technical specifications and integration guides.
As part of this update, we’ve combined all of our CCA product offerings into one consolidated website, making it easier than ever to access the latest information about our products and services.
With the link above, expect to see a new Cardinal Consumer Authentication Integration guide, better filtering for our CMPI messages, and a new look and feel across the site.
This new site will be replacing our old site completely as of January 17, 2025. Cardinal recommends bookmarking the new URLs in the table below to get the most up to date information about our products and services.
CardinalCommerce will be performing network and database system maintenance starting at 12:00 UTC on February 13, 2025, through 12:00 UTC on February 17, 2025.
During this window we will apply the most recent network and database updates for optimal performance and to prevent new exploits from being used against our VCAS systems.
This is being performed in high availability mode and should have no impact to transaction processing. While no transaction impact is anticipated during this maintenance you may experience a few periods of network latency. During this time, we will be fully staffed from a support and network operations standpoint to perform monitoring and testing.
Please do not hesitate to contact your Local VISA support if you have any questions or concerns.