Ensuring Secure File Transfers: Retirement of Outdated SSH Cipher in SAP Concur
Overview
SAP Concur is committed to maintaining the highest security standards for our customers. As part of our ongoing efforts to enhance security measures, we are retiring an outdated cipher used for file encryption in Concur Travel, Concur Expense, and Concur Invoice. This change will take effect on February 19, 2025.
Recommended Actions
While most customers will not need to take any action, it’s crucial that you ensure your systems are prepared for the transition. To ensure a seamless transition and continued secure file transfers, we recommend the following:
- Notify IT: Ensure your IT teams are aware and prepared for the upcoming change by updating any necessary software to avoid disruption.
- Update File Transfer Software: Ensure your file transfer software is up-to-date before February 14, 2025, to support the automatic negotiation of the updated cipher suite. The cipher chacha20-poly1305@openssh.com will be removed, but all other ciphers in the suite will remain available for use.
Ensuring your systems are prepared can provide a smooth transition to the new cipher suite.
For additional details and resources, please view the release notes.
