Xact File Transfer: Infrastructure upgrade
Effective
Saturday 18 November 2017
Clearstream Banking1 will upgrade the Xact File Transfer infrastructure.
Xact File Transfer machine fingerprint
Customers using SFTP must acknowledge a new fingerprint when connecting for the first time after the upgrade.
Revoked Xact File Transfer certificates
Revoked Xact File Transfer certificates will no longer be accepted. Customers must ensure that the Xact File Transfer certificate used to connect is the latest version.
This can be verified by comparing the serial number of the certificate used with the serial number shown in CreationOnline > Xact File Transfer Management > Settings for the user.
SSLv3 protocol and unsecure ciphers no longer supported
Customers are requested to use up-to-date software when using Xact File Transfer.
The following protocols and ciphers will no longer be supported:
Connection | No longer supported |
HTTPS | SSLv3 (entire protocol) Ciphers – TLS RSA WITH 3DES EDE CBC SHA (rsa 2048) |
FTPs | TLSv1.0: Ciphers - TLS RSA WITH 3DES EDE CBC SHA (rsa 2048) |
SFTP - SSH | # message authentication code algorithms (mac) hmac-sha1-96 (mac) hmac-md5-96 (mac) hmac-sha256 (mac) hmac-sha256@ssh.com |
Customers using the SFTP protocol are recommended to test the behaviour of their client software in the Customer Testing Environment in October (date to be communicated at a later time).
Testing for customers using HTTPS is optional if the customer is using an up-to-date and supported browser.
A list of certified software for file exchange and supported browsers is attached below.
Further information
For further information, please contact the Clearstream Connectivity Helpdesk.
1. Clearstream Banking refers collectively to Clearstream Banking S.A., registered office at 42, avenue John F. Kennedy, L-1855 Luxembourg, and registered with the Luxembourg Trade and Companies Register under number B-9248, and Clearstream Banking AG (for Clearstream Banking AG customers using Creation Accounts), registered office at 61, Mergenthalerallee, 65760 Eschborn, Germany and registered in Register B of the Amtsgericht Frankfurt am Main, Germany under number HRB 7500.