How to Tell if Your Box Product is not Compliant With TLS 1.1+

TLS stands for “Transport Layer Security.” It is a protocol that provides privacy and data integrity between two communicating applications. It’s the most widely deployed security protocol used today. Box required an upgrade to TLS 1.2 or higher to align with industry best practices, and deprecated earlier versions of the TLS protocol. This means anyone using browsers, third-party applications, and Box applications that do not support TLS 1.2 will NOT be able to access Box.

Get complete information on TLS deprecation and Box and third-party applications.

If you are having trouble accessing Box, it may be because you are still on an application that is no longer TLS-compliant. Here's how you can tell:

If you try using a version of Box for Office that does not comply with TLS 1.2+:

• You are logged out and will be unable to log back in. Box does not display any errors; your login attempt will not complete and Box will continue to display the "Sign In" button.

If you try using a version of Box Sync that does not comply with TLS 1.2+:

• You will be logged out. When you try logging in again, Box displays a “Reason Code 7” error.
• After getting logged out, the "Box Sync" folder that contains your synced content will still exist on your computer but the content will no longer be synced with Box.

If you try using a version of Box Drive that does not comply with TLS 1.2+:

• If you’re using a Mac, you will be logged out. When you try logging in again, Box displays a “Reason Code 7” error. After getting logged out, the "Box" folder will no longer be accessible.
• If you’re on Windows and on v1.13.83, you may still see the update prompt and may still successfully update to the compliant version (v1.13.84+) after TLS 1.1 is deprecated. Users on older versions (<1.13.83) may see the update prompt but will not be able successfully update. Users on older versions that attempt to update will see Box Drive quit itself and not re-launch.

If you try using a version of Box Tools that does not comply with TLS 1.2+:

• Box Edit
  • You will be unable to open files from Box.com using Box Edit. The Launching Application window may still open, but no additional errors display.
  • If you are still using the previous major version of Box Tools (version 3), there are two scenarios:
    1. If your enterprise environment has already turned off TLS 1.1, the Web app will behave as if Box Tools was never installed.
    2. If your enterprise environment has not yet turned off TLS 1.1, when you try to open a file from the Web app, the Launching Application window may still open, but no additional errors or notifications display.
• Device Trust
  • If you’re still using the previous major version of Box Tools (version 3), you may be prompted to download the latest version of Box Tools when you try to use Box Edit to open a file.

If you try using a version of Box.com that does not comply with TLS 1.2+:

• If you try to access Box's Web site or Web applications from a non-compliant browser, the browser displays network or connection errors. The errors are controlled by the browser and may not be Box-specific.

If you try using a version of FTP that does not comply with TLS 1.2+:

• If you try to use Box's FTP services from a non-compliant FTP client, the system displays network or connection errors. The errors are controlled by the FTP client and may not be Box-specific.