Changes to iOS 9 Security May Impact NetSuite for iPhone Users

This week, NetSuite released the following statement about changes to Apple’s security policy that will affect NetSuite customers using NetSuite for iOS. The new security policy will be enforced in NetSuite for iOS 5.0 app, which is targeted for release in January 2016.

This new security protocol will require NetSuite administrators to validate or update connection points to ensure compliance. For assistance, you can contact NetSuite Customer Support or reach out to your local RSM representative.

Read the full notification from NetSuite:

You are receiving this notification as a user of NetSuite for iOS, who may have used the app with customer scripts or referenced images hosted on an external server.

In iOS 9, Apple introduced a stricter security policy requiring a secure connection between apps and back-end resources. This means it will no longer be possible to use HTTP as a connection protocol.

This policy will be enforced in the forthcoming NetSuite for iOS 5.0 app, targeted for release in January 2016.

If you want to upgrade to the new version of the app and continue running scripts and external resources, you must meet the following criteria:

• The server hosting your scripts, images etc., must support at least Transport Layer Security (TLS) protocol version 1.2
• Connection ciphers are limited to those that provide forward secrecy
• Certificates must be signed using an SHA256 or greater signature hash algorithm, with either a 2048-bit or greater RSA key or a 256-bit or greater Elliptic-Curve (ECC) key

An invalid certificate will result in no connection and you will not be able to access the requested resources. Administrators should ensure that all links to external URLs are updated. For example where a form uses a logo file held on an external server, the link will need to be updated in NetSuite with the new HTTPS version.

We apologize for any inconvenience caused by this change. If you require assistance or more information, please contact NetSuite Customer Support.

Sincerely,

The NetSuite Team

By: Brent Knowles – National NetSuite Solution Provider

Brent Knowles