---
title: "Customer Advisory: (Updated) Changes to Cipher Suite and DNS Servers"
slug: "customer-advisory-updated-cipher-suite-and-dns-servers"
updated: 2025-08-12T16:44:47Z
published: 2025-08-12T16:44:47Z
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.workspot.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Customer Advisory: (Updated) Changes to Cipher Suite and DNS Servers

## What is Changing

1. Scheduled maintenance (now complete) on August 9, 2025, from 0300-0400 UTC to finalize our updated DNS services.
2. We are asking you to verify that everything works as before after this update.
3. We are removing older ciphers from the suite supported by Workspot Control as part of the [Control 19.3 release](/v1/docs/workspot-control-release-193-notes) on August 23, 2025, from 0200-0200 UTC.
  - This gives customers two additional weeks compared to the originally announced schedule.
  - It is possible that old, unsupported Workspot Clients will no longer be able to connect.

## 1. Scheduled Maintenance (Now Completed)

We performed a platform update on Control from August 9, 2025, from 0300-0400 UTC to finalize our DNS server update.

## 2. Post-Maintenance Actions

After the August 9 update, perform the following nslookup:

`>nslookup control.us.workspot.com  `

![](https://cdn.us.document360.io/ad9153e1-c8de-4f56-94f2-b717a1fc3a68/Images/Documentation/image(77).png)

You should see the following results:

**Name**

- ` app-e858252e-43e0-4722-ae55-d7dd13aef7af.enigmatic-caverns-9660.herokuspace.com `

**Addresses**

Ignore (these are dynamic addresses.)

**Aliases**

- `control.us.workspot.com `
- `workspot-us-control.trafficmanager.net `
- `control-ps.us.workspot.com `

## 3. Removal of Older Ciphers

As part of the [Control 19.3 release](/v1/docs/workspot-control-release-193-notes) on August 23, 2025, from 0200-0200 UTC, Workspot will be upgrading the US Workspot Control tenant to remove support for these older ciphers:

- TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)
- TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d)
- TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)
- TLS_RSA_WITH_AES_256_CBC_SHA (0x35)
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH secp521r1 (eq. 15360 bits RSA)
- TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c)

### Action Required: Update Clients to Supported Versions

Unsupported older versions of Workspot Clients have not been tested against any recent Control environment. Their functionality is not guaranteed. If you still use such unsupported versions, you should update them before the date listed in this advisory.

Tested version are:

- Windows Client 6.0.0 and above
- Mac Client 7.1.0 and above
- IOS Client version 7.2.1 and above
- Android Client version 7.1 and above.

To check the versions in use, see [Determining Which Workspot Client Versions are in Use](/v1/docs/determining-which-workspot-client-versions-are-in-use).

*If all your Workspot Clients are updated automatically, no action is required.*

Action is required mostly for:

- Windows Clients, when [Deployment Rings](/v1/docs/workspot-windows-client-automatic-updates-via-deployment-rings) or other update utilities are *not* used to keep your Windows Client software current.
  - Windows Clients 5.3.0 and above can be updated with a new version. Earlier Clients must be uninstalled before a new version can be installed.
- Mac Clients where automatic software updates are disabled.

> **Note:**If you have restricted the cipher suite at the OS level to use only older ciphers, it is also possible that action is required.

## Troubleshooting

If a user cannot connect:

- Check the user’s Client version.
- Have the user check that their device can see the new DNS records and flush the stale DNS caches on their devices.

### Contacting Support

If you have any questions, please [contact Workspot Support](/v1/docs/contacting-workspot-support).

## Related Documents

- [Workspot Control Release 19.3 Notes](/v1/docs/workspot-control-release-193-notes)
- [What to Expect During a Control Update Window](/v1/docs/what-to-expect-during-a-control-update-window).
- [Determining Which Workspot Client Versions are in Use](/v1/docs/determining-which-workspot-client-versions-are-in-use).
- [Workspot Windows Client: Automatic Updates via Deployment Rings](/v1/docs/workspot-windows-client-automatic-updates-via-deployment-rings).
- [Control Customers: Mandatory Update for Workspot Mac Client and iOS Client (Updated)](/v1/docs/eu-control-customers-mandatory-update-for-workspot-mac-client-and-ios-client)