Skip to main content
Avalara Help Center

What do I need to do about the AvaTax SSL certificate change on October 15, 2018?

What

  • Avalara is changing the AvaTax SSL certificate on 10/15/2018.
  • Individuals with knowledge of your SSL certificate information, such as an account ot IT administrator, should refer to the test instructions below.
  • If you have implemented a custom integration for AvaTax or built an application that connects to the AvaTax SDK or API, action is required.
  • If you haven't implemented a customer integration for AvaTax or currently use a connector developed by another company, this change should not affect you and no action is required.

Why

Changing the SSL certificate is a required change because certificates previously issued by Symantec did not comply with the CA/Browser Forum Baseline Requirements. As a result, Chrome and FireFox plan to distrust Symantec's certificates. The current AvaTax SSL certificate was issued by Symantec and will be distrusted in this process. This would prevent users from browsing to the AvaTax site and cause an SSL certificate error. For additional details, follow this link: https://security.googleblog.com/2017/09/chromes-plan-to-distrust-symantec.html

Environment

AvaTax

Does this impact me?

The vast majority of users will be unaffected by this change. If you haven’t implemented a custom integration for AvaTax then this change will not affect you and you don’t need to perform any additional steps. If you are currently using a connector developed by another company, then you will not need to perform any additional steps as that company should be testing the new certificate.

If you have implemented a custom integration for AvaTax or built an application that connects to the AvaTax API, you should test your integration with the new certificate to ensure you won’t be affected. Follow the steps in the Resolution section to test the new SSL certificate.

What is considered a custom integration?

If you have set up custom AvaTax configurations then you should test to make sure that the new SSL certificate will work. Also, if you have set up custom ways of interacting with AvaTax such as using the AvaTax SDK or building your own application that connects to the AvaTax API then you should test the new certificate.

Resolution

To test the new AvaTax certificate, follow the steps below. Enlist an AvaTax Admin in your company or your IT Team to test if necessary.

  1. Go to your Avatax configuration.  (If you are not sure where this is in your system, please click here to search for your connector.)
  2. In the configuration URL field, make a note of the current address. (See chart options)
  3. Depending on what the current address is, replace it with the corresponding URL below:
     
    AvaTax Connection Type Current URL Test URL
    SOAP

    https://avatax.avalara.net

    https://avatax-test.avalara.net

    RESTv1

    https://rest.avalara.net

    https://rest-test.avalara.net

    RESTv2

    https://rest.avatax.com

    https://rest-test.avatax.com

  4. If you want to test the new SSL certificate in the sandbox environment first, replace the current address with the corresponding URL below:
     
    AvaTax Connection Type Current Sandbox URL Test Sandbox URL
    SOAP https://development.avalara.net https://development-test.avalara.net
    RESTv1 https://restsdk.avalara.net https://restsdk-test.avalara.net/
    RESTv2 https://sandbox-rest.avatax.com https://sandbox-rest-test.avatax.com
  5. Save.
  6. Click the button to test the connection.
  7. If the call is successful, then you should not expect any issues.

    NOTE: Make sure you go back and edit the configuration to replace the test URL with the previous URL. The test endpoints will be turned off on 11/15/2018. 
  8. If the call is unsuccessful, verify that the root and intermediate certificates below are installed in the local SSL store where AvaTax is running. If they are already installed then skip to step 10.
  9. If the root and intermediate certificates are not installed, install the root and intermediate certificates below in the local SSL store where AvaTax is running and test the connection again. 
  10. If the certificates are installed successfully, you should not expect any issues. 

    NOTE: Make sure you go back and edit the configuration to replace the test URL with the previous URL. The test endpoints will be turned off on 11/15/2018.
  11. If you are still unsuccessful, install the new AvaTax SSL certificate below in the local SSL store where AvaTax is running and test the connection again.
  12. If the certificates are installed successfully, you should not expect any issues. 

    NOTE: Make sure you go back and edit the configuration to replace the test URL with the previous URL. The test endpoints will be turned off on 11/15/2018.
  13. If you are still unsuccessful then contact Avalara Support. Otherwise, click Save and resume business. 

Important Dates

08/13/18: avatax-test.avalara.net, rest-test.avalara.net, and rest-test.avatax.com - Test endpoints will be turned on. Open for testing.
10/15/18: SSL certificate rotation 
11/15/18: avatax-test.avalara.net, rest-test.avalara.net, and rest-test.avatax.com - Test endpoints will be turned off. Closed for testing. 

General FAQs

How do I test?

Follow the steps in the Resolution section to test the new SSL certificate.

What if the test fails?

You may have installed a certificate locally, consult with your IT department to confirm if you are using the certificate installed in your environment. If so then try installing the new certificate and try testing again.

 

If you are unsuccessful, contact Avalara Support