TCC25-0116 - URGENT REMINDER - Updates to the Customs Internet Gateway Web Service Standards

Start Date / Time

End Date / Time

Clients Affected

2026-02-23

N/A

All clients utilizing the Customs Internet Gateway (CIG) Web Service

URGENT REMINDER 4:

Please be reminded that it is critical that these updates to the existing CIG communication channel to the CBSA are completed prior to March 3, 2026. 
 
Non-compliance with the new protocols will prevent the transmission of commercial documents and will affect all EDI documents transmitted and/or received via CIG, including CARM Daily Notices and Statements of Account (DN/SOA). Limited time remains in which to implement and test these changes and sustain your ability to securely transmit and receive customs data with the CBSA via CIG.

If you have successfully completed testing the CIG Web Service Standard Updates in the RTR1 test environment, they can now be deployed to PROD. 

For assistance please contact the TCCU mailbox directly: [email protected] 

 
UPDATE 3: 

Please be advised that the Customs Internet Gateway (CIG) Web Service Standard Updates have been deployed to the Production (PROD) environment.

If you have successfully completed testing the CIG Web Service Standard Updates in the RTR1 test environment, they can now be deployed to PROD. 

Please be reminded that it is critical that these updates to the existing CIG communication channel to the CBSA are completed prior to March 3, 2026. 

Non-compliance with the new protocols will prevent the transmission of commercial documents and will affect all EDI documents transmitted and/or received via CIG, including CARM Daily Notices and Statements of Account (DN/SOA). Limited time remains in which to implement and test these changes and sustain your ability to securely transmit and receive customs data with the CBSA via CIG.

For assistance please contact the TCCU mailbox directly: [email protected]

 

UPDATE 2:

The Connectivity Testing for the Customs Internet Gateway (CIG) Web Service Standards can now commence using the following test environment: RTR1.

Please contact the TCCU mailbox ([email protected]) directly to arrange for testing.

  UPDATE 1:

***Please note that there have been some changes made to the CIG PRD Addendum v1.1 since the initial messaging was relayed via Internal Bulletin TCC25-0116 on September 3, 2025.

The following ciphers will no longer be supported on the current version of RHEL/Apache:
  

• TLS_ECDHE_ECDSA_WITH_AES_128_CCM
• TLS_ECDHE_ECDSA_WITH_AES_256_CCM 

Note: To keep our CIG services running smoothly and keep pace with industry standards , the CBSA may be required to modify or update the supported list of Transport Layer Security (TLS) ciphers at any time and without notice. The CBSA will advise all clients via bulletin of any updates to the currently supported ciphers.

A separate bulletin will be disseminated to communicate when the Connectivity Testing for the Customs Internet Gateway (CIG) Web Service Standards can commence using the following test environment: RTR1.

Please contact the TCCU mailbox ([email protected]) directly for all questions pertaining to:

• The updated technical specifications
• To arrange for testing, or
• To receive a copy of the Participant Requirements Document (PRD) Addendum v1.1 

Note: In order to remain compliant updates must be made by March 3, 2026.

 Please be advised that the CBSA requires all clients using the Customs Internet Gateway (CIG) web service to meet the following technical specifications before March 3, 2026:

•    HTTP requests must meet HTTP 1.1 standards.
•    Transport Layer Security (TLS) must meet TLS 1.3 standards.
•    Uniform Resource Locator (URL) and Uniform Resource Identifier (URI) Changes

 Please check your current security protocols to ensure compliance. If updates are required, they can be initiated immediately but should not be deployed to your test or production environment until notified by the CBSA via an upcoming Commercial Client Bulletin.

 It is strongly recommended that testing is conducted. The CBSA will provide a test environment in the coming weeks. Updates must be completed prior to March 3, 2026 to remain compliant and continue to communicate with the CBSA.

 For all questions pertaining to the updated technical specifications and/or to arrange for testing, please contact the TCCU mailbox: [email protected].

 A copy of the Participant Requirements Document (PRD) Addendum v1.0 can be requested via email at the Technical Commercial Client Unit (TCCU) mailbox: [email protected]. Please indicate in the subject line the document that you would like to receive. E.g. CIG PRD Addendum

 The next full edition of the CIG PRD publication (version 2.3) will be available following implementation of the changes listed within this addendum. An updated bulletin will be issued once this document becomes available.