M-A090924-01 Infrastructure Changes to Support OpenSSL 3.0 on ERCOT's External Web Services API.
NOTICE DATE: September 9, 2024
NOTICE TYPE: M-A090924-01 General
SHORT DESCRIPTION: Infrastructure Changes to Support OpenSSL 3.0 on ERCOT's External Web Services API.
INTENDED AUDIENCE: Market Participant personnel that administer programmatic access to ERCOT’s production and testing environments and User Security Administrators (USAs)
DAYS AFFECTED: October 24, 2024 and January 7, 2025
LONG DESCRIPTION: Due to changes in security industry standards, ERCOT is upgrading the infrastructure used to support all programmatic access to ERCOT’s Production External Web Services APIs (MISAPI.ERCOT.COM and API.WAN.ERCOT.COM). ERCOT will be updating the version of OpenSSL used to secure the communication between Market Participants (MPs) and ERCOT on these APIs.
On October 24, 2024, ERCOT will update the MOTE/RMTE External Web Services API infrastructure, enabling OpenSSL 3.0. ERCOT is making these changes available to the test environments to ensure that MPs have adequate time to test this new configuration.
On January 7, 2025, ERCOT will update the Production External Web Services API infrastructure, enabling OpenSSL 3.0.
ERCOT’s MOTE and RMTE can be accessed through the following URLs.
Note that this effort causes no impacts to MPs that access the Market Information System (MIS) or other ERCOT websites through a web browser.
ACTION REQUIRED: MP personnel that administer programmatic access to ERCOT’s production and testing environments will need to ensure that MP systems used in communication with ERCOT External Web Services APIs support the use of OpenSSL 3.0. Failure to make the required changes on the MP side can cause connection errors and will prevent access to ERCOT External Web Services API’s.
ADDITIONAL INFORMATION: ERCOT is NOT making changes to the following security items
SSL certificates used to secure the API websites
Client API certificates used for authentication to the APT websites
Security cyphers or protocols used in the security of the website communication
ERCOT only supports TLS 1.2 at this time
CONTACT: If you have any questions, please contact your ERCOT Account Manager. You may also call the general ERCOT Client Services phone number at (512) 248-3900 or contact ERCOT Client Services via email at ClientServices@ercot.com.
If you are receiving email from a public ERCOT distribution list that you no longer wish to receive, please follow this link in order to unsubscribe from this list: http://lists.ercot.com.