From NewHaven Software Wiki

Revision as of 17:09, 8 July 2010

Overview

In our version 7.0 release we announced that we can no longer support Windows 2000, either as a server or a workstation operating system. These operating systems will continue to work with CMS version 6.x and below but, because Microsoft is suspending support for Windows 2000 on July 13th, 2010, we must also abandon support for Win 2000.

An additional consideration regarding Windows 2000 is that PCI compliance (requirement 6.1) states that you keep your systems updated. When Windows 2000 stops receiving support and security patches from Microsoft, our understanding is you will then not be able to keep your system(s) PCI compliant either.

CMS 7.0 and Win2000

Upgrading your operating systems from Windows 2000 to a supported operating system is not just a good idea - for CMS version 7.x, it has become a requirement. There are technical issues which make Windows 2000 no longer viable for running CMS.

CMS relies on the Windows CryptoAPI (referenced in the CMS PA-DSS Implementation Guide) as part of our improved AES encryption used for credit card and password encryption. Earlier versions of CMS did not use AES encryption or the Windows Crypto API so this was not an issue.

The first edition of Windows to include the CrypoAPI that CMS 7.0 needs is XP Pro SP3. This document on Service Pack 3 provides additional information on the enhancement. (Search for SHA to find the pertinent section of the document.)

Servers and Workstations

• Encryption takes place on the workstation (before it crosses the network and is written to the database) so it critical to upgrade your workstation operating systems.

• Server updates, particularly the upgrade from version 6.x to 7.x, must also access the Windows CryptoAPI - so here again, the operating system update is crucial.

If you attempted to launch CMS 7.x on a Windows 2000 machine (or XP SP1 or 2), you should expect to get errors in CMS right from the login screen due to our need to decrypt the password stored in the database.

We have also recently added an automatic operating system check to our installer which will warn you if you are attempting to install CMS on a machine running an incompatible operating system. This cannot detect if you have incompatible workstations on your network, however. You must still perform those checks on your own (or let the installer do it for you by performing a CMS 7.0 workstation update on your machine.)

Upgrading

Please consult this link which contains migration information for upgrading your workstations or servers from Windows 2000 to a supported operating system.

If upgrading your server means moving to a new machine, this Wiki article should also be referenced for instructions on how to move CMS from one server to another.