Update Browser Notification

You may have been shown a browser warning pop-up similar to the one below:

To continue to provide you with the best experience online, Bunnings is adhering to changing web environments and security protocols by removing support of TLS 1.0 from April 2018. TLS, or Transport Layer Security, is required for secure Internet communication.

The Payment Card Industry (PCI) Data Security Standard stipulates that the TLS 1.0 encryption protocol can no longer be used for secure communications. Any web servers which still support TLS 1.0 or below will fail the PCI standards and therefore will not be allowed to take credit card payments online. The PCI DSS standards can be read in full here: https://www.pcisecuritystandards.org/document_library?category=pcidss&document=pci_dss

Bunnings follows the PCI standards to keep our customer’s credit card details secure. Bunnings never collects customers credit card details, and customers must either update their browsers or switch to TLS 1.1 or above to maintain security, ensuring orders can be completed successfully.

What we recommend

We recommend you upgrade your browser to the latest version for security reasons. We advise all affected users to upgrade to the latest versions of their browser, or make changes to disable TLS 1.1 and below.

Please use the following links to upgrade your browser:
Internet Explorer
Firefox
Chrome
Safari

Internet Explorer

Option 1 (Preferred) – Upgrade to the latest version of Internet Explorer at http://windows.microsoft.com/en-us/internet-explorer/download-ie, or Microsoft Edge at https://www.microsoft.com/en-us/download/details.aspx?id=48126 (Windows 10 only)

Option 2 – Update settings in your existing browser

1. Go to 'Tools' or click the settings icon:
2. Select 'Internet Options' > 'Advanced tab'.
3. Scroll down to the 'Security' section at the bottom.
4. Make sure 'TLS 1.1' and ‘TLS 1.2' are checked.
5. Make sure all other TLS 1.0 and all SSL protocols are disabled

Firefox

Option 1 (Preferred) – Upgrade to the latest version of Firefox at https://www.mozilla.org/en-US/firefox/desktop/

Option 2 – Update settings in existing browser. Firefox no longer has an interface to modify protocol settings so you will need to directly modify the integer values in the about:config page:

1. Type about:config into the address bar
2. Select 'I accept the risk!' if you are shown a warning message
3. Type security.tls.version.min into the search box.
4. Double-click on the security.tls.version.min row
5. Change the value from '1' to '2' (0 means SSL 3.0, 1 means TLS 1.0, 2 means TLS 1.1 etc)
6. Click 'OK'
7. Changing the setting will force Firefox to use TLS 1.1 or better

Chrome

Option 1 (Preferred)> – Upgrade to the latest version of Chrome at http://www.google.com/chrome/

Option 2 – Update settings in existing browser:

1. Open Google Chrome.
2. Press Alt F and select 'Settings'.
3. Scroll down and select Show advanced settings...
4. Scroll down to the 'Network' section and click on Change proxy settings...
5. Select the Advanced tab.
6. Scroll down to 'Security' category and enable 'Use TLS 1.1' and 'Use TLS 1.2'
7. Make sure all other TLS 1.0 and all SSL protocols are disabled
8. Click OK.

Safari

There are no options for enabling SSL protocols. If you are using Safari version 7 or greater, TLS 1.1 and TLS 1.2 are automatically enabled. If you have an earlier version, please upgrade at https://support.apple.com/en-us/HT204416