May 02, 2024

URGENT – Removal of vulnerable TLS ciphers

On April 29, FedEx rolled back a maintenance update that had affected customers with outdated ciphers and legacy browser/operating systems (OS).

On June 10, at 8:00 p.m. CST FedEx will once again perform the maintenance to remove these vulnerable ciphers. To maintain connectivity to FedEx API Gateway, we require that you upgrade your ciphers and older browser/OS to be compliant with FedEx information security standards. These are the ciphers to be removed:

• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

If you have questions or need technical assistance, please click on Select your Location and Language > select your language > go to Menu and select Support. The Support Page will have the dedicated support phone number or contact your FedEx Customer Technology representative.

Thank you for your time and attention. We appreciate your business.