Skip to content
English
  • There are no suggestions because the search field is empty.

Supported TLS cipher suites and SSL policy changes

View the TLS cipher suites currently supported by Cezanne HR and the cipher suites that will remain supported following our security policy update on 7 September 2026.

On 7 September 2026, Cezanne HR will update its SSL/TLS security policy to align with current security best practices. This article lists the TLS cipher suites currently supported and those that will continue to be supported after the update. 

Currently supported TLS cipher suites:

  • TLS_AES_128_GCM_SHA256
  • TLS_AES_256_GCM_SHA384
  • TLS_CHACHA20_POLY1305_SHA256
  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES128-SHA256
  • ECDHE-RSA-AES128-SHA256
  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-GCM-SHA384
  • ECDHE-ECDSA-AES256-SHA384
  • ECDHE-RSA-AES256-SHA384

Cipher suites supported after the security policy update:

  • TLS_AES_128_GCM_SHA256
  • TLS_AES_256_GCM_SHA384
  • TLS_CHACHA20_POLY1305_SHA256
  • ECDHE-ECDSA-AES128-GCM-SHA256
  • ECDHE-RSA-AES128-GCM-SHA256
  • ECDHE-ECDSA-AES256-GCM-SHA384
  • ECDHE-RSA-AES256-GCM-SHA384

Cipher suites being removed:

  • ECDHE-ECDSA-AES128-SHA256
  • ECDHE-RSA-AES128-SHA256
  • ECDHE-ECDSA-AES256-SHA384
  • ECDHE-RSA-AES256-SHA384

What you need to do

Most customers will not need to take any action. Modern browsers, operating systems, and integration platforms are designed to automatically negotiate a supported cipher suite.

If you use:

  • Custom API integrations,
  • Legacy middleware or networking appliances,
  • Older operating systems or application servers, or
  • Security devices that enforce specific TLS cipher configurations,

you may wish to review your TLS configuration with your IT provider to confirm that a supported cipher suite is available and enabled. The cipher suites listed in the "Supported after the security policy update" section should be used where applicable.

Additional information

This security policy update is part of our ongoing efforts to maintain strong security controls and remain aligned with evolving industry standards, including the adoption of post-quantum cryptographic approaches where appropriate.

If you have any questions regarding compatibility with your environment or integrations, please contact our support team.