How to Tell if Your Box Product is not Compliant With TLS 1.1+

Box Employee

TLS stands for “Transport Layer Security.” It is a protocol that provides privacy and data integrity between two communicating applications. It’s the most widely deployed security protocol used today.  Box required an upgrade to TLS 1.1 or higher to align with industry best practices, and deprecated earlier versions of the TLS protocol.  This means anyone using browsers, 3rd-party applications, and Box applications that do not support TLS 1.1 or 1.2 will NOT be able to access Box.  

 

Get complete information on TLS deprecation and Box and third-party applications.

 

If you are having trouble accessing Box, it may be because you are still on an application that is no longer TLS-compliant.  Here's how you can tell:

 

 

If you try using a version of Box for Office that does not comply with TLS 1.1+:

  • You are logged out and will be unable to log back in. Box does not display any errors; your login attempt will not complete and Box will continue to display the "Sign In" button.

 

If you try using a version of Box Sync that does not comply with TLS 1.1+:

  • You will be logged out. When you try logging in again, Box displays a “Reason Code 7” error.
  • After getting logged out, the "Box Sync" folder that contains your synced content will still exist on your computer but the content will no longer be synced with Box. 

 

If you try using a version of Box Drive that does not comply with TLS 1.1+:

  • If you’re using a Mac, you will be logged out. When you try logging in again, Box displays a “Reason Code 7” error. After getting logged out, the "Box" folder will no longer be accessible. 
  • If you’re on Windows and on v1.13.83, you may still see the update prompt and may still successfully update to the compliant version (v1.13.84+) after TLS 1.0 is deprecated. Users on older versions (<1.13.83) may see the update prompt but will not be able successfully update. Users on older versions that attempt to update will see Box Drive quit itself and not re-launch. 

 

If you try using a version of Box Tools that does not comply with TLS 1.1+:

  • Box Edit
    • You will be unable to open files from Box.com using Box Edit. You may still see the "Launching Application" pop-up window, but no additional errors display.
    • If you are still using the previous major version of Box Tools (version 3), you may be prompted to download the latest version of Box Tools when you try to use Box Edit to open a file.
  • Device Trust
    • If you’re still using the previous major version of Box Tools (version 3),may be prompted to download the latest version of Box Tools when you try to use Box Edit to open a file.

If you try using a version of Box.com that does not comply with TLS 1.1+:

  • If you try to access Box's Web site or Web applications from a non-compliant browser, the browser displays network or connection errors. The errors are controlled by the browser and may not be Box-specific.

 

If you try using a version of FTP/WebDAV that does not comply with TLS 1.1+:

  • If you try to use Box's FTP or WebDAV services from a non-compliant FTP or WebDAV client, the system displays network or connection errors. The errors are controlled by the FTP or WebDAV client and may not be Box-specific.
Comments
New Contributor

I downloaded your update. Why are you still asking me to my account?

 

Phillip Nystrand 

New Contributor

Your upgrade procedures are the most complicated set of computer instructions I’ve encountered. The absence of human support only makes it worse.

First-time Contributor

One can never be sure if the mandatory Box Drive updates actually worked for the dreaded 11/12/2018 deadline.  After our purportedly-good updates, we kept receiving warnings about the same thing.  Box does not care about your productivity because it had no firm plans on getting your updates deployed as seamlessly as possible.  My small firm spends over $1000/month on cloud solutions.  Box is by far the least thought through product my firm is using.  No kudos for Box for now.

Box Employee

Hey @cnjong!

 

Thanks for reaching out in the Box Community! I understand that even though you've updated Box Drive in your enterprise, you are still seeing messages about non-compliant users in your enterprise. First, here's an article about Box Drive's update procedure, in case you are unfamiliar with our update deployment in Box Drive: Box Drive Update Behavior. In order to investigate further, it would be best if we could look into this with you in a support ticket which you can submit at support.box.com. Once you've done so, we can identify for you any users who are not on a compliant version of Box Drive, answer any questions about users who are still appearing in the noncompliance report, and identify any reasons for users to appear in the report who may have already updated their applications. 

 

Thanks and we'll be looking forward to seeing a support ticket from you so that we can help assist further!

First-time Contributor

After the message of the 12 Nov expiration, I downloaded the new Box Sync update, deleted the older one, installed the new one, double clicked and... a message saying 'Box Sync error' appeared, without any other explanation.

I run an old Mac OSX 10.7.5, and usually use Chrome Version 49.0.2623.112 (64-bit)

Could it be because of that? 

Thanks for any support..!

Community Manager

Hi @andreapassenger,

 

Yes I would recommend updating your OS to a supported system. Let us know if you're still experiencing an issue after the update!