Thycotic Status

Secret Server Cloud will be undergoing scheduled maintenance on Dec 31, 2016 and users may experience intermittent outages during the maintenance window (2:00 pm - 6:00 pm).

11/16/2016 @ 10:40am: We are currently experiencing a service interruption with Secret Server Cloud.  We will post an update as we troubleshoot the issue.

11/16/2016 @ 12:08pm: We are still working on a permanent fix for the issue causing the intermittent outages.  In the meantime, we have implemented some adjustments to keep the service operational.

SSC Servers at Azure temporarily stopped responding for approximately 5 minutes @ 2:58 pm ET.  We are currently looking into the cause.

Secret Server Cloud will be undergoing emergency maintenance on 10/28/2016 between 8:00PM and 12:00AM ET, the service may be unavailable intermittently during this window.

09/21/2016 @ 11:10pm EDT:  We are currently increasing resources to ensure proper performance during high-usage times

07/06/2016 

Status @ 3:15 EDT: SecretServerOnline.com is currently experiencing an outage.  We are actively working to correcting the issue and will update shortly.

SecretServerOnline.com started experiencing latency issues at approximately at 2:30pm EDT(6:30pm UTC) which lasted for approximately 1 hr 45 min.  During this time, the site may have been inaccessible to customers.  Action was taken to resolve the latency issues and we are continually monitoring the site for further issues.

UPDATE: We are continuing to see long latency issues with SecretServerOnline.com.  We are actively working to resolve the issue and will update the status as progress is made.

UPDATE @ 6:51pm EDT: We’ve determined the cause of the latency and made some infrastructure updates to prevent the issue.  As an additional precaution, we will expand the resources available to SecretServer tomorrow night.

05/10/2016 UPDATE @ 8:50pm EDT: Maintenance is currently underway.  We will post updates as progress continues.

UPDATE @ 9:25pm EDT: Resources have been increased on SecretServerOnline database servers and the system has been restored.  We are currently experiencing slow load times while the system fully initializes.  We’ll post an update once the system is functioning at normal speeds.

The DROWN vulnerability which debuted early 2016 allows for attack on SSLv2, an outdated security protocol that is known to have many security flaws.

In order to protect against DROWN attacks, all one must do is ensure that SSLv2 is not supported in any of their secure operations.

Windows Server 2008 and up, as well as Windows Vista and up, all come built in with IIS (Internet Information Services) version 7.0 or greater. SSLv2 support is disabled by default in IIS 7.0 and greater, so there is no threat of DROWN attacks on servers which meet those requirements.

On Tuesday, October 14th 2014 Google announced and disclosed a vulnerability, CVE-2014-3566, also known a POODLE.

For our own servers and services, we have disabled SSLv3 and instead require newer protocols such as TLS 1.0 and later. This will have no impact on practically all users of Secret Server Online and things will keep working normally. Only those that are using Internet Explorer 6 or other very old software will experience connectivity issues. Disabling SSLv3 for Secret Server Online was done proactively before the formal security announcement at approximately 11:30 AM ET.

For customers, we strongly recommend you disable the SSLv3 protocol all together for use with Secret Server and all other Thycotic solutions.

SecretServerOnline.com experienced an outage at 5:29 EDT that lasted approximately 13 minutes. Action was taken to correct a web server that was experiencing connectivity problems.

Update 4:30 PM EDT