Veeva Vault Cipher Suite Changes

Veeva Vault modifies the set of supported TLS cipher suites to provide a better developer experience. For example, we may remove weak ciphers or change cipher priority order to utilize stronger ciphers. These changes may affect custom integrations, but Vault UI users are not affected. See the list of currently supported TLS cipher suites in the REST API documentation.

Prior to any changes, Veeva will contact all customers with affected integrations so that they can test their integrations. Customers can test the new ciphers on a limited release sandbox Vault.

If you have questions, please contact Veeva Support.

25R1 Changes

Release Date: 24R3.2; Dec 18, 2024

Beginning with the 25R1 release, Vault will add support for the following TLS 1.3 cipher suites:

In addition, Vault no longer supports the following CBC cipher suites:

These changes may affect some custom integrations, but not users accessing Vault with a supported browser. All customers with affected integrations will be contacted directly by Veeva Developer Services.

22R1 Changes

Release Dates:

In this release, Vault will no longer support TLS1.0 and TLS1.1 for FTPS. These changes may affect custom integrations, but Vault UI users are not affected.

21R1 Changes

Release Dates:

Beginning with the 21R1 release, Vault will no longer support the following cipher:

21R1 TLS Cipher Suite Order

20R3 Changes

Release Dates:

Beginning with the 20R3 release, Vault will no longer support the following ciphers:

The following cipher will be moved to the bottom of the cipher suite priority list:

20R3 TLS Cipher Suite Order