Skip to main content
Avalara Help Center

What do I need to do about the AvaTax SSL certificate change on July 13, 2020?

What

  • Avalara is changing the AvaTax SSL certificate on 7/13/2020.
  • If you haven't implemented a custom integration for AvaTax or currently use a connector developed by another company, this change should not affect you and no action is required.
  • If you have implemented a custom integration for AvaTax or built an application that connects to the AvaTax SDK or API, action is required.
  • This article is intended for individuals with knowledge of your SSL certificate information, such as an account or IT administrator. They should refer to the test instructions below.

Why

All SSL certificates have time-bound expiration dates as a security best practice; changing the SSL certificate is required due to the certificate expiration. Depending on the configuration of your custom SSL integration, you may need to update the certificates manually. A known technology that requires a manual rotation is Java Keystore.  IBM WebSphere and Oracle WebLogic are known to use Java Keystore. If your integration uses these technologies, we recommend  that you proactively download and save the new SSL config files prior to the SSL certificate rotation on 7/13/2020. 

 

Environment

AvaTax

Does this impact me?

The vast majority of users will be unaffected by this change. If you (Account Admin) haven’t implemented a custom integration for AvaTax then this change will not affect you and you don’t need to perform any additional steps. If you are currently using a connector developed by another company, then you will not need to perform any additional steps as that company should be testing the new certificate.

If you (Account Admin) have implemented a custom integration for AvaTax or built an application that connects to the AvaTax API, you should test your integration with the new certificate to ensure you won’t be affected. Follow the steps in the Resolution section to test the new SSL certificate.

What is considered a custom integration?

If you have set up custom AvaTax configurations, then you should test to make sure that the new SSL certificate will work. Also, if you have set up custom ways of interacting with AvaTax, such as using the AvaTax SDK or building your own application that connects to the AvaTax API, then you should test the new certificate.

Resolution

Account Admin/IT Administrator: To test the new AvaTax certificate, follow the steps below. 

  1. Go to your Avatax configuration.  (If you are not sure where this is in your system, please click here to search for your connector.)
  2. In the configuration URL field, make a note of the current address. (See chart options)
  3. Depending on what the current address is, replace it with the corresponding URL below:
     
    AvaTax Connection Type Current URL Test URL
    SOAP

    https://avatax.avalara.net

    https://avatax-test.avalara.net

    RESTv1

    https://rest.avalara.net

    https://rest-test.avalara.net

    RESTv2

    https://rest.avatax.com

    https://rest-test.avatax.com

  4. If you want to test the new SSL certificate in the sandbox environment first, replace the current address with the corresponding URL below:
    NOTE: SSL Certificates are the same for both Sandbox and Production accounts.
     
    AvaTax Connection Type Current Sandbox URL Test Sandbox URL
    SOAP https://development.avalara.net https://development-test.avalara.net
    RESTv1 https://restsdk.avalara.net https://restsdk-test.avalara.net/
    RESTv2 https://sandbox-rest.avatax.com https://sandbox-rest-test.avatax.com
  5. Save.
  6. Click the button to test the connection.
  7. If the call is successful, then you should not expect any issues.

    NOTE: Make sure you go back and edit the configuration to replace the test URL with the previous URL. The test endpoints will be turned off on 08/17/2020. 
  8. If the call is unsuccessful, install the new AvaTax SSL certificate below in the local SSL store where AvaTax is running and test the connection again. NOTE: SSL Certificates are the same for both Sandbox and Production accounts. (Verify that the root and intermediate certificates below are installed in the local SSL store where AvaTax is running. If they are already installed then skip to step 10.)
    • AvaTax Certificate - AvaTax-Certificate.cer
    • If the certificates are installed successfully, you should not expect any issues.
    • NOTE: Make sure you go back and edit the configuration to replace the test URL with the previous URL. The test endpoints will be turned off on 08/17/2020.
  9. If the call is still unsuccessful, the root and intermediate certificates may not be installed. Install the root and intermediate certificates below in the local SSL store where AvaTax is running and test the connection again. 
  10. If the certificates are installed successfully, you should not expect any issues. 

    NOTE: Make sure you go back and edit the configuration to replace the test URL with the previous URL. The test endpoints will be turned off on 08/17/2020.
  11. Click Save.

Important Dates

06/26/20: avatax-test.avalara.net, rest-test.avalara.net, and rest-test.avatax.com - Test endpoints will be turned on. Open for testing.
07/13/20: SSL certificate rotation 
08/17/20: avatax-test.avalara.net, rest-test.avalara.net, and rest-test.avatax.com - Test endpoints will be turned off. Closed for testing. 

General FAQs

How do I test?

Follow the steps in the Resolution section to test the new SSL certificate.

What if the test fails?

You may have installed a certificate locally, consult with your IT department to confirm if you are using the certificate installed in your environment. If so then try installing the new certificate and try testing again.

 

If you are unsuccessful, contact Avalara Support