Customer Advisory: (Updated) Changes to Cipher Suite and DNS Servers

  • Updated on Aug 8, 2025
  • Published on Jul 25, 2025
  • 2 minute(s) read
  • Robert Plamondon
 Prev Next

What is Changing

  1. Scheduled maintenance on August 9, 2025, from 0300-0400 UTC to finalize our updated DNS services.

  2. We are asking you to verify that everything works as before after this update.

  3. We are removing older ciphers from the suite supported by Workspot Control as part of the Control 19.3 release on August 23, 2025, from 0200-0200 UTC.

    • This gives customers two additional weeks compared to the originally announced schedule.

    • It is possible that old, unsupported Workspot Clients will no longer be able to connect.

1. Scheduled Maintenance

We will be performing a platform update on Control from August 9, 2025, from 0300-0400 UTC to finalize our DNS server update.

2. Post-Maintenance Actions

After the August 9 update, perform the following nslookup:

>nslookup control.us.workspot.com  

You should see the following results:

Name

  • [TBD].herokuspace.com  

Note: We will update the “TBD” portion after the update on August 9.

Addresses

Ignore (these are dynamic addresses.)

Aliases

  • control.us.workspot.com

  • workspot-us-control.trafficmanager.net

  • control-ps.us.workspot.com

3. Removal of Older Ciphers

As part of the Control 19.3 release on August 23, 2025, from 0200-0200 UTC, Workspot will be upgrading the US Workspot Control tenant to remove support for these older ciphers:

  • TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)

  • TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d)

  • TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)

  • TLS_RSA_WITH_AES_256_CBC_SHA (0x35)

  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027) ECDH secp521r1 (eq. 15360 bits RSA)

  • TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c)  

Action Required: Update Clients to Supported Versions

Unsupported older versions of Workspot Clients have not been tested against any recent Control environment. Their functionality is not guaranteed. If you still use such unsupported versions, you should update them before the date listed in this advisory.  

Tested version are:

  • Windows Client 6.0.0 and above

  • Mac Client 7.1.0 and above

  • IOS Client version 7.2.1 and above

  • Android Client version 7.1 and above.

To check the versions in use, see Determining Which Workspot Client Versions are in Use.

If all your Workspot Clients are updated automatically, no action is required.

Action is required mostly for:

  • Windows Clients, when Deployment Rings or other update utilities are not used to keep your Windows Client software current.

    • Windows Clients 5.3.0 and above can be updated with a new version. Earlier Clients must be uninstalled before a new version can be installed.

  • Mac Clients where automatic software updates are disabled.

Note: If you have restricted the cipher suite at the OS level to use only older ciphers, it is also possible that action is required.

Troubleshooting

If a user cannot connect:

  • Check the user’s Client version.

  • Have the user check that their device can see the new DNS records and flush the stale DNS caches on their devices.

Contacting Support

If you have any questions, please contact Workspot Support.

Related Documents