Synchronization Server Security Enhancements
Introduction
EarnIn Payroll is updating the synchronization server service to enhance security. All service bureaus must be using ReadyPay version 3.67.0.52 (or higher) to make the following changes.
These improvements require your service bureau to take action before the dates listed below to continue receiving updates to ReadyPay.
This article includes the timeline for when the security enhancements will be enabled.
August 11, 2025 — A TLS connection is required to SyncUp to EarnIn Payroll
- Log in to ReadyPay with an account that can access the Upstream Site tab.
- Update the Sync Hostname to
taxsync.rpo.payroll.earnin.com. - Update the Port to
443. - Log on to the process server that performs the SyncUp job and
locate the file named
SyncUpConfiguration.iniwithin theC:\Program Files (x86)\Millennium 3folder. - Use a text editor to open the file and update the value for
SSLEnabledtotrue. - Restart the ReadyPay Process Server service.
- Repeat steps 4–6 for each classic process server that can run the SyncUp job to EarnIn Payroll.
Contact Support if you want to enable TLS for all your downstream sites. Support will provide you with additional instructions.
August 25, 2025 — Service bureau IP addresses must be whitelisted to SyncUp to EarnIn Payroll
All service bureaus must send Support the IP address / address range that their environments use to make a connection to EarnIn Payroll when doing a SyncUp. Connection attempts from any IP address not on the list will be rejected.
Questions?
Contact your Payroll Service Provider.