Eurex Frankfurt AG

05/31/2023 | News release | Distributed by Public on 05/31/2023 03:15

Eurex Exchange Readiness Newsflash | Update of FIX LF server certificates in production and upcoming withdrawal of unencrypted ETI LF and ETI HF connectivity options

Dear Eurex Participant,

With this Newsflash, we would like to inform about the change of the FIX LF server certificates in production. Additionally, we would like to remind you of the mandatory implementation dates for payload and password encryption for ETI LF and ETI HF sessions.

1. Update of FIX LF server certificates in production

For the start of trading on 12 June 2023 (t.b.c.) Deutsche Börse will update the server certificates of all FIX LF gateways in the T7 production environment.

The server certificates will be changed as follows:

  • Server certificates are currently signed by "DigiCert Root CA"
  • From 12 June 2023, the server certificates in the production environments will be signed by "DigiCert Global Root G2"

Participants validating the authenticity of the server certificates (not mandatory), will need to ensure that the "DigiCert Global Root G2" certificate is added to their application Trust Store and can be downloaded under the following link: https://cacerts.digicert.com/DigiCertGlobalRootG2.crt.pem

In addition to the above certificate, which is currently in use for all FIX LF gateways in the T7 and T7 Börse Frankfurt simulation environments and to ensure the seamless transition to new server to new server certificates in the future, the "DigiCert TLS RSA4096 Root G5" certificate should also be added as part of any regular trust store: https://cacerts.digicert.com/DigiCertTLSRSA4096RootG5.crt.pem

2. Withdrawal of the unencrypted ETI LF and ETI HF connectivity options in simulation and production

Please note that the next encryption milestone is the mandatory implementation of payload encryption for simulation ETI LF sessions which are initiated from outside of the Equinix FR2 co-location facility. The mandatory use of payload encryption for these sessions will come into effect on 4 August 2023, followed by the mandatory implementation of ETI LF payload encryption for production ETI LF sessions which are initiated from outside of the Equinix FR2 co-location facility on 23 October 2023.

Mandatory implementation of password encryption for ETI HF and ETI LF sessions initiated within the Equinix FR2 co-location facility will follow on 24 November 2023 (simulation) and 11 December 2023 (production).

We urge participants to take all necessary steps and adapt existing applications in time.

Full details can be found in Eurex Circular 005/23.

Further details on Encryption can be found on the Eurex website www.eurex.com under:

and under the following Support pages:

  • Support > Initiatives & Releases > T7 Release 11.0 > System Documentation > Network Access
  • Support > Initiatives & Releases > T7 Release 11.1 > System Documentation > Network Access

If you have any further questions or comments, please do not hesitate to contact your Technical Key Account Manager or send an e-mail to [email protected].

Kind regards,
Your Client Services Team

How to keep up with news? Get the latest Eurex updates fast and easy using: Eurex App, LinkedIn, YouTube or visit our website.

Recipients:

All Trading Participants of Eurex Deutschland and Vendors

Target groups:

Eurex Central Coordinators,
Front Office/Trading, Middle + Backoffice, IT/System Administration, Auditing/Security Coordination

Related circular:

Eurex Circular 005/23

Contact:

[email protected]

Web:

Support > Initiatives & Releases > Readiness for projects > Mandatory Interface Encryption
Support > Initiatives & Releases > T7 Release 11.0 > System Documentation > Network Access
Support > Initiatives & Releases > T7 Release 11.1 > System Documentation > Network Access