Important Updates for the ArcGIS Platform and Transport Layer Security (TLS) Protocol Support

Esri is committed to building and providing strong security for the ArcGIS Platform and helping our customers by using the latest security protocols. We strive to implement the highest industry standards, including TLS for data integrity and network security.

To meet these standards,Esri is making configuration information available and, where necessary, providing software updates across the ArcGIS platform to support TLS 1.2. As part of improving ArcGIS Online security, Esri is planning to require TLS 1.2 connections for ArcGIS Online services starting on April 16, 2019. Action will be required prior to this change to ensure continued access to these ArcGIS Online services. For details about Esri's support for TLS, including patches and instructions for updating software, visit support.esri.com/en/tls.

ArcGIS 10.6 Patches and Service Packs

• ArcGIS Server Improper Access Control Security Patch
  • 05-14-2018—PATCH
  • This security patch addresses a specific access control vulnerability found in ArcGIS Server. Esri strongly recommends that all customers apply this patch at the earliest possible opportunity.

• ArcGIS Server 10.6.1 Pre-Planned Routes Patch
  • 11-15-2018—PATCH
  • This patch addresses an issue with the route layers created from Share as Route Layers geoprocessing tool in ArcGIS Pro or from the analysis tools in Map Viewer. It is highly recommended to install this patch if you use ArcGIS Enterprise with Navigator for ArcGIS.

ArcGIS 10.5 Patches and Service Packs

• ArcGIS Server Improper Access Control Security Patch
  • 05-14-2018—PATCH
  • This security patch addresses a specific access control vulnerability found in ArcGIS Server. Esri strongly recommends that all customers apply this patch at the earliest possible opportunity.