Announcements

Our product news has moved to the new Product Updates page. Please update your bookmarks and subscriptions accordingly. Thanks!

Box Product News

16626 Views
47 Comments
1620 Views
5 Comments

Earlier this year, we announced that we have ended support for apps (both Box developed and third-party) that use the TLS 1.0 protocol. To ensure the security of apps and content, we will begin blocking apps which use TLS 1.0 on November 12, 2018.

 

We want to ensure that users have enough time allotted prior to our blocking of apps to perform the upgrade, especially if those users may need IT assistance or permission.

 

On September 17, 2018, we will begin sending emails directly to Box users who have been observed using an unsupported app running the insecure protocol, providing links and instructions on how to update the specific affected apps they have been using.

 

Below is an example of that email, both for reference as well as validation that it was an official communication.

 

TLS_User_Communication.png

 

 

  • Deprecations
212 Views
0 Comments

  • To align with the TLS 1.0 deprecation, all Box Tools versions prior to Box Tools v4.1+ for Mac and Windows will not function beginning on November 12, 2018. Users are required to upgrade to at least Box Tools v4.1 or higher for Mac and Windows to continue using Box Tools.

  • You can find more information on the overall TLS 1.0 deprecation here.

437 Views
2 Comments

  • Starting November 12, 2018, Box will no longer be supporting the DICOM Proxy. The DICOM Proxy should continue to work as is. However, effective the EOL date, Box will no longer be assisting customers with configuring the DICOM Proxy or other related technical issues / support. In case of any breaking changes in the future that render the DICOM Proxy dysfunctional, Box reserves the right to patch the Proxy or not.

  • Box will continue to support the Box DICOM Viewer and the upload functionality via the Box DICOM Import Tool (part of the Box Web App) will continue to work. Learn more about the DICOM Proxy vs Viewer here.

61191 Views
33 Comments

Box will no longer provide support for products and services that rely on the Transport Layer Security (TLS) 1.0 encryption protocol as of June 25, 2018.

 

Starting on 8:00 AM PST on November 12, 2018, Box will block products and services using the TLS 1.0 encryption protocol.

 

Update 09-21-2018

We've consolidated our FAQs into a new KB article and added new details, including:

  • The minimum compliant version of Box Sync on Windows is 4.0.6416, not 4.0.7900.
  • IE v11 is needed for Box Drive and Box Sync to login successfully. This was called out in the "Compliant Browsers" section, but we've added additional notes to make it more clear.
  • Added a note that Box for Windows Phone, Box for Windows 8, or Box for Windows 10 applications have been deprecated.
  • Added a note that Mobile Blackberry 10 will be deprecated as well.

Please review the following FAQs for more details about the change and what you may need to do.

 

The content below is out of date. Please refer to the FAQs for the most recent and accurate information about this change.

 

What do I need to do? 

  • Users need to ensure they're using a compliant version of applications and browsers before November 12, 2018 in order to avoid issues using Box services.
  • Using non-compliant versions of applications and browsers after November 12, 2018 will result in issues and may require manually updating of applications. For more details on end user impact, please see this article.
  • Administrators may find this email template helpful when contacting their end users. 
  • More background information and the minimum compliant versions of each client can be found in the sections below.  

What is TLS?

  • TLS stands for “Transport Layer Security" and is a widely deployed security protocol that is used to securely exchange data over a network. TLS ensures that a connection to a remote endpoint is the intended endpoint through encryption and endpoint identity verification. The versions of TLS, to date, are TLS 1.0, 1.1 and 1.2.
  • Box Web and API connections, along with applications such as Box Drive and 3rd party apps, use TLS as a key component of their security. 

Why is TLS 1.0 being disabled?

  • Box is requiring an upgrade to TLS 1.1 or higher in order to align with industry best practices for security and data integrity. Box is focused on continually helping our customers improve their security by using the latest security protocols.  
  • For more information on the global effort to remove support for TLS 1.0, please reference this article from the PCI Security Standards Council.

What happens after TLS 1.0 is disabled?

  • Any users using non-compliant versions of applications and browsers after TLS is disabled will see issues. For more details, please see this article.
  • Users on a non-compliant Box application will need to manually update to resolve any issues. IT administrators looking to update their end users' Box applications through a deployment tool should review our recommendations here.
  • Users are required to upgrade their browser to a version that supports TLS 1.1 or higher. Most modern browsers support TLS 1.1 and 1.2. To determine whether your browser supports TLS 1.1 or higher, go here.
  • Anyone using 3rd-party applications that do not support TLS 1.1 or higher must upgrade those applications. Developers of such 3rd-party applications also must upgrade their applications to support TLS 1.1 or higher.

 

 

TLS 1.1+ Compliant Box Desktop Applications

Box desktop products have been updated to meet the TLS 1.1+ compliance.  In order to be in compliance, you must be on the minimum versions below on both Mac and Windows machines. Additionally, all Windows machines must be on .NET 4.5.2 or higher in order for desktop applications to continue to work after the TLS 1.0 deprecation on November 12, 2018.  

 

 

The minimum versions that comply are as follows:

Note: For more details on regarding how non-compliant versions of Box Sync, Box Tools, Box for Office and Box Drive will behave after TLS 1.0 is disabled, please see this article.

 

Box Product

Minimum Compliant Version

Download Latest Version

End user impact on non-compliant version

Box Tools 

Box Tools v4:

Mac & Windows: v4.1+

 

Note: We recommend users upgrade to the latest Box Tools version 4.1.x. Box Tools 4.0.x is a non-compliant version as it utilizes the .NET 4.0 framework. 

Download here.


Users will be unable to open files from Box. For more details, 

please see this article.

 Box Sync

Mac & Windows: 4.0.7900+

Download here.

Long Term Supported installer available here.

Users will be logged out and will be unable to log in. 

The "Box Sync" folder will still exist but changes will not be synced.

 

For more details,

please see this article.

Box Drive

Mac: 1.7+
Windows: all Box Drive versions On Windows are compliant in terms of core functionality such as accessing Box content and uploading changes. However, 1.13.84+ is required for Windows users in order for Box Drive's update functionality to remain compliant. 

Download here.

 

Mac: 
Users will be logged out and will be unable to log in

Windows: 

Users may not be able to successfully update but  all other functionality will continue to work. 

 

For more details,

please see this article.

Box for Office

4.5.1227+

 Download here.

Users will be logged out and will be unable to log in.  

 

For more details,

please see this article.

  

Why are my users on a non-compliant version? 

All Box desktop applications have a built-in update process. More information on how Box's desktop products' updates work and Box's recommendations on deploying manual updates can be found here.

 

Further clarification on Box Tools and the .NET framework:

  • If you are currently on Box Tools 3.5, you can keep using it without interruption. However, we strongly recommend you upgrade to the latest version of Box Tools, which is Tools 4.1
  • If you are currently on Box Tools 4.0, you MUST upgrade your .NET framework to .NET 4.5.2 +. Box then auto-updates you to the latest, compliant version of Box Tools (4.1+). If your organization blocks auto-updates, you will have to perform the Box Tools update manually.
  • If you are currently on Box Tools 4.1, there is nothing you need to do. You are up-to-date.

TLS 1.1+ Compliant Box Mobile Applications

Box mobile products have been updated to meet the TLS 1.1+ compliance. To remain in compliance you must be on the minimum versions below on both Android and iOS devices.

Unless they've somehow customized their installation of Box mobile products, all users should automatically update to at least the minimum compliant version below; no action is required. However, i f you have customized the installation of these applications for your users in any way, you may need to ensure all your users upgrade to a minimum compliant version prior to November 12, 2018 to continue to access Box.

 

Note  Box for Android was deprecated for versions of Android 4.4.x (KitKat) and earlier in February 2018. These versions of Android are no longer supported by the Box app and will be unable to log in with existing versions of the Box app following the deprecation of TLS 1.0 on November 12, 2018.

 

Box Product

Minimum Compliant Version

Box for iPhone and iPad
(including EMM versions)

Version 4.3.2 and later


Available now!

Box Capture for iPhone and iPad

Version 1.3.3 and later


Available now!

Box for Android Phones and Tablets (including EMM versions)

Android: 4.15 and later


Available now! 

Box Capture for EMM

Version 1.3.1 and later

Available now!

 

 

 

Box Mobile Download for iOS and Android
Download the latest Box app version for iOS and Android here.

https://www.box.com/resources/downloads

 

Box EMM Download Instructions

 

TLS 1.1+ Compliant Browsers

To ensure that you are TLS 1.1+ compliant, make sure your browsers are updated to these minimum versions below prior to November 12, 2018 to continue to access Box:

 

Browser

TLS 1.1

TLS 1.2

Chrome

22-25+

30-32+

Safari

7+

7+

Firefox

27–33+

ESR 31.0–31.2+

27–33+

ESR 31.0–31.2+

Internet Explorer

11+

11+

Edge

All Versions

All Versions

 

TLS and DICOM Proxy
If you’re using an incompatible version of the DICOM Proxy to upload DICOM files to Box, your DICOM Proxy will stop working as of November 12, 2018, when we deprecate TLS 1.0.

 

On Monday, June 18, we released an updated and compliant version of the DICOM Proxy. You will have to update your organization manually as automatic updates are not available for this product.


Here’s the link to download the compliant version of the DICOM Proxy and here are instructions for manually deploying it.

 

TLS 1.1+ Compliant 3rd Party Applications

Finally, in order to make sure that all 3rd party applications used by your organization are in compliance, please take action for the following prior to November 12, 2018 to continue to access Box:

 

Application Name

Upgrade Path

3rd Party Integrations 

Ensure your integration with Box is updated to TLS 1.1+ using the documentation found here

FTP

Ensure your FTP client is configured to support TLS 1.1+. Steps may include updating FTPS connection settings to support a minimum version of TLS 1.1 or higher. Please refer to documentation from your preferred FTP client.

WebDAV

Ensure your WebDAV client is configured to support TLS 1.1+.  Steps may include updating WebDAVS connection settings to support a minimum version of TLS 1.1 or higher. Please refer to documentation from your preferred WebDAV client

 

 

801 Views
0 Comments

We constantly work to improve the user experience on Box, and sometimes that means removing functionality to make room for an even better product.  Please review the features below that will retire in the coming months and find additional support information in these notices.

Box Desktop (Box Drive, Box Sync, Notes for Desktop and Box Tools) support on Mac OS 10.11

  • On July 31, 2018, Box Drive, Box Sync, Notes for Desktop and Box Tools will no longer be supported on Mac OS 10.11. Per our OS support policy, we maintain support for Box on only the two latest versions of Mac OS (10.12 & 10.13).
  • Following July 31, 2018, users will still be able to access the Box Desktop applications (Box Drive, Box Sync, Notes for Desktop and Box Tools) on 10.11, but it will be unsupported by Box, including all security patches.

  • Deprecations
12793 Views
57 Comments

We constantly work to improve the user experience on Box, and sometimes that means removing functionality to make room for an even better product.  Please review the features below that will retire in the coming months and find additional support information in these notices.

 

WebDAV Support

  • On Jan 31, 2019, we will deprecate support for WebDAV. If you are connecting to Box using a WebDAV client, you will see connection errors and will no longer be able to view or access your content on Box through your WebDAV client.
  • We recommend that customers currently using WebDAV migrate to an alternative Box tool at their earliest convenience. Box Drive or the Box WebApp may be suitable alternatives based on the use case.

406 Views
0 Comments

We constantly work to improve the user experience on Box, and sometimes that means removing functionality to make room for an even better product.  Please review the features below that will retire in the coming months and find additional support information in these notices.

Box Sync LTS v 4.0.7829

  • On June 15, 2018 we will end support for the Box Sync LTS v4.0.7829 installer to ensure users are LTS 1.1+ compliant. Administrators who utilize our LTS installers for Box Sync deployments can use the new versions immediately and should update as soon as possible. After Box disables LTS 1.0, the current LTS will no longer work. For more information about LTS 1.1+ compliance read our Community announcement here.

  • Deprecations
615 Views
0 Comments

IMPORTANT   June 14, 2018 - We have updated details about our TLS 1.0 deprecation, including a postponement of the date of deprecation from June 15 to June 25.  Get the most up to date announcement on TLS 1.0.

 

We constantly work to improve the user experience on Box, and sometimes that means removing functionality to make room for an even better product.  Please review the features below that will retire in the coming months and find additional support information in these notices.

TLS 1.0

  • As previously communicated in our last EOL announcement, to maintain the highest security standards, promote the safety of our customers' data, and align with industry-wide best practices, Box will disable the TLS 1.0 encryption protocol across all Box services on June 15, 2018.
  • After Box disables TLS 1.0, users leveraging browsers, 3rd party applications or Box applications that do not support TLS 1.1 or 1.2 will not be able to access Box. Review the Box Community article Preparing for TLS 1.0 Disablement for best practices.


Note   On June 15, 2018 these desktop applications will enforce the previously announced deprecation of the .NET 4.0 framework.  All Windows machines must be on .NET 4.5.2 or higher.

  • Deprecations
3280 Views
5 Comments

IMPORTANT: Please see this article for the most up to date information regarding the TLS 1.0 deprecation.

 

355 Views
0 Comments

We are working on new content discovery functionality that will replace our existing Updates page in the Box web application. We are targeting a release of the new functionality in late spring/early summer 2018. Further details will be shared regarding the transition as we approach this release.

3659 Views
2 Comments

Upon the release of Box for Android 4.10, which is expected to be available the week of February 12th, Box will no longer continue support for Android OS KitKat (4.4 - 4.4.4). However, users should not see any current interruptions utilizing the Box for Android application on version 4.9 and will still be able to utilize it on KitKat. Updated 9/10/2018: this will no longer be true as of November 12th, 2018 when Box TLS support ends.

 

As Box ends support for Android OS KitKat, users will no longer receive new app updates through the Google Play Store. Our support team will not be able to troubleshoot/resolve issues for users on KitKat and older operating systems. 

 

For those who would like to receive newer client updates, please update your Android devices to Android OS Lollipop or later. 

Please log in to subscribe

Stay up to date!

Subscribe to Box newsletters:


First time here?

Tips to get you started: