As part of our ongoing Centinel Data Center Migration, we are preparing to complete the Production DNS cutover that will transition remaining traffic to the Visa Data Center proxy flow. To support a smooth transition and minimize disruption, we will conduct a series of controlled Production DNS “shock treatments” throughout March, followed by the final Production DNS cutover in early April.
Below is an overview of what to expect, key dates, and any actions required on your side.
What Will Occur and When
March 2026 – Production DNS Shock Treatments
These short duration activities are designed to validate client readiness and identify any remaining configuration issues prior to final cutover.
Date: March 11, 2026
Activity: Production DNS Shock Treatment #1
Expected Duration ~5 minutes
Date: March 25, 2026
Activity: Production DNS Shock Treatment #3
Expected Duration: ~30 minutes
During these windows, DNS responses will temporarily return updated IP addresses associated with the Visa Data Center proxy flow. Clients who have not yet updated their configurations may experience brief processing interruptions during the shock treatment windows.
April 2026 – Final Production DNS Cutover
April 1, 2026 – Production DNS Cutover
- This change will be permanent.
- All applicable traffic resolving legacy Cardinal endpoints will be directed to the Visa Data Center proxy endpoints.
- There will be no automatic reversion after this cutover.
What This Means for You
Clients who have already:
- Updated target endpoints to .cardinaltrusted.com, and
- Adjusted any IP allowlists / firewall rules to trust the new IP ranges, should not experience impact during or after these activities.
Clients who have not completed these updates may see transaction failures during the March shock treatments and sustained impact following the April cutover.
Client Actions Required
Please ensure the following actions are completed before March 11, 2026:
1. Update all backend endpoints to use the Visa proxy domain (.cardinaltrusted.com).
2. Update IP allowlists / firewall rules to trust the new Production IP ranges.
3. Confirm your integration properly consumes response URLs returned dynamically (for DDC, Lookup, and Authenticate flows), rather than hardcoding legacy URLs.
4. Complete Production testing ahead of the March shock treatment windows.
Taking these steps early will help avoid disruption as we progress toward the final cutover.
Support and Contacts
If you have questions, need assistance validating your readiness, or experience any issues during these activities:
- Primary Support Channel: Please open a ticket through the Cardinal Support portal.
- Account or Migration Questions: Contact your Cardinal/Visa Client Success or Implementation Manager.
During scheduled shock treatments, our technical and support teams will be actively monitoring and ready to assist.
We appreciate your partnership as we complete this important milestone in the Centinel migration. Thank you for taking the necessary steps to ensure a smooth transition.