NOTICE DATE: February 21, 2023
NOTICE TYPE: M-A062822-10 General
SHORT DESCRIPTION: Update - Effective March 20, 2023 ERCOT will utilize TLS1.2 for ERCOT’s External Web Services API for ERCOT initiated communication
INTENDED AUDIENCE: Market Participant personnel who administer programmatic access from ERCOT’s production and testing environments and User Security Administrators (USAs)
DAYS AFFECTED: March 20, 2023
LONG DESCRIPTION: ERCOT TLS1.0 and TLS1.1 protocol deprecation on ERCOT’s External Web Services API was completed on 11/30/2022. ERCOT initiated communication will also no longer use TLS 1.0 or 1.1 beginning on 3/20/2023. This was previously planned to go in on 11/30/2022 along with inbound transmissions, however due to technical challenges this portion was delayed. Anyone who updated their systems during the initial communication should not have to make any updates.
Due to changes in security industry standards, ERCOT is deprecating the TLS1.0 and TLS1.1 protocols used in communication to all programmatic access from ERCOT-initiated Notifications sent to Market Participants.
On March 20, 2023, ERCOT will no longer initiate communication to Market Participant listeners on any protocol below TLS1.2.
ACTION REQUIRED: Market Participant personnel who administer programmatic access from ERCOT’s production and testing environments will need to ensure that they are able to receive TLS1.2 protocol connectivity from ERCOT. Failure to make the required changes on the Market Participant side will lead to a loss of automated Notifications.
ADDITIONAL INFORMATION: A presentation of the TLS protocols is available for users to understand the importance of the deprecation of the legacy TLS protocols for the security of web communication.
Six Market Notices have been issued communicating the dates for the TLS deprecation.
The Technology Working Group has discussed the deprecation of the legacy TLS protocols in the following meetings:
CONTACT: If you have any questions, please contact your ERCOT Account Manager. You may also call the general ERCOT Client Services phone number at (512) 248-3900 or contact ERCOT Client Services via email at [log in to unmask].
If you are receiving email from a public ERCOT distribution list that you no longer wish to receive, please follow this link in order to unsubscribe from this list: http://lists.ercot.com
dg