ArcGIS Online security update (TLS 1.2) and how it affects ArcPad users

[MarikaVertzonis]

Transport Layer Security (TLS) is a protocol that provides privacy and data integrity between two communicating applications. Esri is planning to require TLS 1.2 connections for ArcGIS Online services in February 2019. Keep an eye on this Technical Support information page for updates on this.

At that time, ArcPad running on platforms that support TLS 1.2, will continue to work with no limitations or change in behavior.

ArcPad running on platforms that do not support TLS 1.2, will experience the following limitations:

•  feature services can not be synced with ArcGIS Online
• ArcPad packages can not be downloaded or uploaded to ArcGIS Online (including the download of ArcPad templates)
     

All other features will continue to work as normal.

Windows Desktop does support TLS 1.2.

Windows Mobile/CE 6.5 and earlier do not support TLS 1.2. Windows CE 7.0 can be updated to support TLS 1.2, by the manufacturer.

This change has the same consequences on ArcPad users as that experienced in December 2015 due to the SHA2 update.

[IngridHogle]

So if we are publishing our feature services locally, hosting them on our own private server using ArcGIS for Server, we will not be affected, right?

[MarikaVertzonis]

Its not so much where you publish your service, but how you move data back and forth between the services and your field device. if you use check out / check in methodology your fine. If you use sync from within the app, you will be affected. But, sync was already affected by the SHA2 update 3 years ago. If your project is working today, it means you already weren't using features that will be affected. And remember, this is really only an issue on Windows Mobile. Windows is not affected.

[MarikaVertzonis]

As a reminder / prompt - this change is happening on the 16th April 2019 - see the Technical Support information page for more info.

[AntonioCano]

Thank you for your post, it was very helpful. I noted you had stated in the original post that devices running on Windows CE 7.0 could be updated by the manufacturer to support TLS 1.2.

However, in the list of affected products (https://support.esri.com/en/tlsproducts) it suggests that the syncing and upload/download would still not be supported for Windows Mobile even if it is updated to TLS 1.2.

My takeaway is that devices with windows os would be affected and there doesn't seem to be any solution. However these devices would still be able to move data back and forth as you stated through the check out/check in. Am i correct in inferring this?

-Antonio

[MarikaVertzonis]

Aha - thank you for pointing me to that statement in the tlsproducts summary page, but its wrong. It should read:

Syncing feature services and upload/download ArcPad packages requires TLS 1.2 support provided by the OEM.

I will get that statement fixed.

Your paragraph after the screenshot might be a little muddled - are you still asking about windows mobile there? If you windows mobile device has windows ce version 6.5 or earlier, yes, there's no way to upgrade it. if it has windows ce 7, then it can be upgraded by the manufacturer. Bu yes, you can still use check out/in on windows mobile devices that do not have TLS 1.2.

[AntonioCano]

Ok thank you. This was very helpful.