How to Tell if Your Box Product is not Compliant With TLS 1.1+

Box Employee

TLS stands for “Transport Layer Security.” It is a protocol that provides privacy and data integrity between two communicating applications. It’s the most widely deployed security protocol used today.  Box required an upgrade to TLS 1.1 or higher to align with industry best practices, and deprecated earlier versions of the TLS protocol.  This means anyone using browsers, 3rd-party applications, and Box applications that do not support TLS 1.1 or 1.2 will NOT be able to access Box.  

 

Get complete information on TLS deprecation and Box and third-party applications.

 

If you are having trouble accessing Box, it may be because you are still on an application that is no longer TLS-compliant.  Here's how you can tell:

 

 

If you try using a version of Box for Office that does not comply with TLS 1.1+:

  • You are logged out and will be unable to log back in. Box does not display any errors; your login attempt will not complete and Box will continue to display the "Sign In" button.

 

If you try using a version of Box Sync that does not comply with TLS 1.1+:

  • You will be logged out. When you try logging in again, Box displays a “Reason Code 7” error.
  • After getting logged out, the "Box Sync" folder that contains your synced content will still exist on your computer but the content will no longer be synced with Box. 

 

If you try using a version of Box Drive that does not comply with TLS 1.1+:

  • If you’re using a Mac, you will be logged out. When you try logging in again, Box displays a “Reason Code 7” error. After getting logged out, the "Box" folder will no longer be accessible. 
  • If you’re on Windows and on v1.13.83, you may still see the update prompt and may still successfully update to the compliant version (v1.13.84+) after TLS 1.0 is deprecated. Users on older versions (<1.13.83) may see the update prompt but will not be able successfully update. Users on older versions that attempt to update will see Box Drive quit itself and not re-launch. 

 

If you try using a version of Box Tools that does not comply with TLS 1.1+:

  • Box Edit
    • You will be unable to open files from Box.com using Box Edit. You may still see the "Launching Application" pop-up window, but no additional errors display.
    • If you are still using the previous major version of Box Tools (version 3), you may be prompted to download the latest version of Box Tools when you try to use Box Edit to open a file.
  • Device Trust
    • If you’re still using the previous major version of Box Tools (version 3),may be prompted to download the latest version of Box Tools when you try to use Box Edit to open a file.

If you try using a version of Box.com that does not comply with TLS 1.1+:

  • If you try to access Box's Web site or Web applications from a non-compliant browser, the browser displays network or connection errors. The errors are controlled by the browser and may not be Box-specific.

 

If you try using a version of FTP/WebDAV that does not comply with TLS 1.1+:

  • If you try to use Box's FTP or WebDAV services from a non-compliant FTP or WebDAV client, the system displays network or connection errors. The errors are controlled by the FTP or WebDAV client and may not be Box-specific.