SUPEE-11085

SUPEE-11085 or Authorize.net Direct Post Signature Key patch. Added on March 1, 2019 that patch updates Authorize.Net Direct Post integration to continue processing payments. Authorize.net will stop supporting MD5 based hash usage on March 14, 2019. Starting from this date, to be able to continue successfully process payments using these methods, merchants need to apply the patch provided by Magento and replace the existing MD5 hash with a Signature Key in the Magento Admin configuration settings.

The patch can be downloaded from Magento Tech Resources.

For detailed instructions needed to enable Signature key in Magento admin please refer to official documentation:
Update Authorize.Net Direct Post from MD5 to SHA-512

Note: There are some Known issues for this patch.

The following files are updated in this patch:

app/code/core/Mage/Authorizenet/Model/Directpost.php
app/code/core/Mage/Authorizenet/Model/Directpost/Request.php
app/code/core/Mage/Authorizenet/Model/Directpost/Response.php
app/code/core/Mage/Authorizenet/etc/config.xml
app/code/core/Mage/Authorizenet/etc/system.xml

ZIP bundle for patch installation via file upload

Unpack and copy app/ folder to your Magento root directory.

Magento version	SUPEE-11085 ZIP bundle
CE 1.9.2.4 - CE 1.9.4.0 (PHP5.5 and newer)	SUPEE-11085-1.9.x
CE 1.9.2.4 - CE 1.9.4.0 (PHP5.4 and older)	SUPEE-11085-1.9.x-oldPHP

You can use our patch installation service to install all missing security patches at once.