Upcoming Change to FINRA fileX SFTP SSH Ciphers and Algorithms
As a part of FINRA’s security enhancements, we are changing SFTP server's SSH Ciphers and Algorithms.
What this means for you:
All users who transfer files via the fileX SFTP must update their configurations to use the newly supported SSH Ciphers and Algorithms. Failure to do so will result in an inability to access the fileX application via SFTP.
What's not affected:
There is no impact for non-SFTP fileX integrations.
Next Steps:
Please review the list of newly supported Ciphers and Algorithms provided below and ensure your systems are updated accordingly. Timeline for the change is also included below
Office Hours:
The FINRA fileX team will be hosting office hours related to this change in July 2025 and August 2025. If you are interested in signing up for the office hours or have advance questions, please provide your email address and questions here. We appreciate your attention to this update and your continued partnership.
New Supported Ciphers and Algorithms List
| New Supported Ciphers and Algorithms | ||
|---|---|---|
| 1 | Supported SSH Ciphers |
|
| 2 | Supported SSH Key Exchange Algorithms |
|
| 3 | Supported SSH MAC Algorithms |
The Ciphers and Algorithms that will no longer be supported are crossed out below
| Current Ciphers and Algorithms | |
|---|---|
| Supported SSH Ciphers |
|
| Supported SSH Key Exchange Algorithms |
|
| Supported SSH MAC Algorithms |
|
Timeline
| Milestone | Target Date | Completed (Yes/No) |
|---|---|---|
| Office Hours 1 | July 9, 2025 | Yes |
| QAINT | July 14, 2025 | Yes |
| Office Hours 2 | Aug. 2025 | No |
| PROD | End of Feb. 2026 | No |
fileX User guide has Production and QA environment details and can be found here.
FINRA Applications That Support SFTP File Transfer Method
| App Name | App Space Name | Transfer Methods Supported | |
|---|---|---|---|
| 1 | 606nms | in, out | SFTP + HTTPS + S3_DIRECT |
| 2 | acats | in | SFTP + HTTPS + S3_DIRECT |
| 3 | adv | in, out | SFTP + HTTPS + S3_DIRECT |
| 4 | aepstockrec | in, out | SFTP + HTTPS + S3_DIRECT |
| 5 | annual_audit_filing | out | SFTP + HTTPS + S3_DIRECT |
| 6 | ats_exempt_trd | in, out | SFTP + HTTPS + S3_DIRECT |
| 7 | bd_auditor_dsclr_feed | out | SFTP + HTTPS + S3_DIRECT |
| 8 | beacon | in | SFTP + HTTPS + S3_DIRECT |
| 9 | blotters | data, legend, out | SFTP + HTTPS + S3_DIRECT |
| 10 | blshts | in, out | SFTP + HTTPS + S3_DIRECT |
| 11 | box | out | SFTP + HTTPS + S3_DIRECT |
| 12 | cboednc | in | SFTP + HTTPS + S3_DIRECT |
| 13 | cccs | in, out | SFTP + HTTPS + S3_DIRECT |
| 14 | ceplatfm | courseproviders_in, courseproviders_out, courseresults_in, courseresults_out, courses_in, courses_out, incidentreports_in | SFTP + HTTPS + S3_DIRECT |
| 15 | cfportal | in | SFTP + HTTPS + S3_DIRECT |
| 16 | cleanshares | in | SFTP + HTTPS + S3_DIRECT |
| 17 | clm | out | SFTP + HTTPS + S3_DIRECT |
| 18 | crd | incoming_designations, incoming_filings, reports results | SFTP + HTTPS + S3_DIRECT |
| 19 | dtcc-fdr | in | SFTP + HTTPS + S3_DIRECT |
| 20 | edgar_pds | in | SFTP + HTTPS + S3_DIRECT |
| 21 | erd | mdsfund | SFTP + HTTPS + S3_DIRECT |
| 22 | etf | in, in_pcf_main, in_pcf_supp | SFTP + HTTPS + S3_DIRECT |
| 23 | fdr | in | SFTP + HTTPS + S3_DIRECT |
| 24 | firmcontact | out | SFTP + HTTPS + S3_DIRECT |
| 27 | focus | in, out | SFTP + HTTPS + S3_DIRECT |
| 28 | FormT | in, out | SFTP + HTTPS + S3_DIRECT |
| 29 | fss | in | SFTP + HTTPS + S3_DIRECT |
| 30 | iard | foia_download, foia_upload | SFTP + HTTPS + S3_DIRECT |
| 31 | livevolusr | in | SFTP + HTTPS + S3_DIRECT |
| 32 | mpp | in, in2 | SFTP + HTTPS + S3_DIRECT |
| 33 | msrb_avts | in | SFTP + HTTPS + S3_DIRECT |
| 34 | nasdaq_vntv | in | SFTP + HTTPS + S3_DIRECT |
| 35 | nav | in | SFTP + HTTPS + S3_DIRECT |
| 36 | nq_clrg | in | SFTP + HTTPS + S3_DIRECT |
| 37 | NVXPLYTC | in, out | SFTP + HTTPS + S3_DIRECT |
| 38 | otc | in | SFTP + HTTPS + S3_DIRECT |
| 39 | pfrd | file_in, file_out, out, section1To4_report_out, section5_event_report_out, section6_event_report_out | SFTP + HTTPS + S3_DIRECT |
| 40 | phlxdnc | in | SFTP + HTTPS + S3_DIRECT |
| 41 | pmap | covered_agency_in, covered_agency_out, enhanced_margin_in, enhanced_margin_out, out | SFTP + HTTPS + S3_DIRECT |
| 42 | r4530 | in, out | SFTP + HTTPS + S3_DIRECT |
| 43 | rdms | incoming, xbrl | SFTP + HTTPS + S3_DIRECT |
| 44 | regm | in, out | SFTP + HTTPS + S3_DIRECT |
| 45 | rema | in | SFTP + HTTPS + S3_DIRECT |
| 46 | rex | in, out | SFTP + HTTPS + S3_DIRECT |
| 47 | rgstrn_submission | out | SFTP + HTTPS + S3_DIRECT |
| 48 | sbs | in | SFTP + HTTPS + S3_DIRECT |
| 49 | shortinterest | out | SFTP + HTTPS + S3_DIRECT |
| 50 | shorts | in, out | SFTP + HTTPS + S3_DIRECT |
| 51 | slate | feedback, filings | SFTP + HTTPS + S3_DIRECT |
| 52 | ssmart | in | SFTP + HTTPS + S3_DIRECT |
| 53 | stockrecord | in, out | SFTP + HTTPS + S3_DIRECT |
| 54 | tdr | in_ice, in_ndq, out | SFTP + HTTPS + S3_DIRECT |
| 55 | teamconn | in | SFTP + HTTPS + S3_DIRECT |
| 56 | thresholdlist | out | SFTP + HTTPS + S3_DIRECT |
| 57 | tradejrnls | agency, agencyc, clearing_cds, clearing_orf, equity_adf, equity_orf, trace_ca, trace_cb, trace_cb_144a, trace_cb_144ac, trace_cbc, trace_eod_sp, trace_eod_spc, trace_eod_tsds, trace_eod_tsdsc, trace_sp, trace_sp_144a, trace_sp_144ac, trace_trsry, tsar, tsarc | SFTP + HTTPS |
| 58 | trpcy_srvc_erd | in_cds | SFTP + HTTPS + S3_DIRECT |
| 59 | workday | from_vms, from_workday, to_vms, to_workday | SFTP + HTTPS + S3_DIRECT |
| 60 | wssdmcredreg | out | SFTP + HTTPS + S3_DIRECT |