Upcoming Change to FINRA fileX SFTP SSH Ciphers and Algorithms
As a part of FINRA’s security enhancements, we are changing SFTP server's SSH Ciphers and Algorithms.
What this means for you:
All users who transfer files via the fileX SFTP must update their configurations to use the newly supported SSH Ciphers and Algorithms. Failure to do so will result in an inability to access the fileX application via SFTP.
What's not affected:
There is no impact for non-SFTP fileX integrations.
Next Steps:
Please review the list of newly supported Ciphers and Algorithms provided below and ensure your systems are updated accordingly. Timeline for the change is also included below.
New Supported Ciphers and Algorithms List
| New Supported Ciphers and Algorithms | ||
|---|---|---|
| 1 | Supported SSH Ciphers |
|
| 2 | Supported SSH Key Exchange Algorithms |
|
| 3 | Supported SSH MAC Algorithms |
The Ciphers and Algorithms that will no longer be supported are crossed out below
| Current Ciphers and Algorithms | |
|---|---|
| Supported SSH Ciphers |
|
| Supported SSH Key Exchange Algorithms |
|
| Supported SSH MAC Algorithms |
|
Timeline
| Milestone | Target Date | Completed (Yes/No) |
|---|---|---|
| Office Hours 1 | July 9, 2025 | Yes |
| QA | July 14, 2025 | Yes |
| Office Hours 2 | Aug 2025 | Yes |
| CT | Nov. 1, 2025 | No |
| PROD | End of Feb 2026 | No |
fileX User guide has Production and QA environment details and can be found here.
FINRA Applications That Support SFTP File Transfer Method
| App Name | App Space Name | Transfer Methods Supported | |
|---|---|---|---|
| 1 | 606nms | in, out | SFTP + HTTPS + S3_DIRECT |
| 2 | acats | in | SFTP + HTTPS + S3_DIRECT |
| 3 | adv | in, out | SFTP + HTTPS + S3_DIRECT |
| 4 | aepstockrec | in, out | SFTP + HTTPS + S3_DIRECT |
| 5 | annual_audit_filing | out | SFTP + HTTPS + S3_DIRECT |
| 6 | ats_exempt_trd | in, out | SFTP + HTTPS + S3_DIRECT |
| 7 | bd_auditor_dsclr_feed | out | SFTP + HTTPS + S3_DIRECT |
| 8 | beacon | in | SFTP + HTTPS + S3_DIRECT |
| 9 | blotters | data, legend, out | SFTP + HTTPS + S3_DIRECT |
| 10 | blshts | in, out | SFTP + HTTPS + S3_DIRECT |
| 11 | box | out | SFTP + HTTPS + S3_DIRECT |
| 12 | cboednc | in | SFTP + HTTPS + S3_DIRECT |
| 13 | cccs | in, out | SFTP + HTTPS + S3_DIRECT |
| 14 | ceplatfm | courseproviders_in, courseproviders_out, courseresults_in, courseresults_out, courses_in, courses_out, incidentreports_in | SFTP + HTTPS + S3_DIRECT |
| 15 | cfportal | in | SFTP + HTTPS + S3_DIRECT |
| 16 | cleanshares | in | SFTP + HTTPS + S3_DIRECT |
| 17 | clm | out | SFTP + HTTPS + S3_DIRECT |
| 18 | crd | incoming_designations, incoming_filings, reports results | SFTP + HTTPS + S3_DIRECT |
| 19 | dtcc-fdr | in | SFTP + HTTPS + S3_DIRECT |
| 20 | edgar_pds | in | SFTP + HTTPS + S3_DIRECT |
| 21 | erd | mdsfund | SFTP + HTTPS + S3_DIRECT |
| 22 | etf | in, in_pcf_main, in_pcf_supp | SFTP + HTTPS + S3_DIRECT |
| 23 | fdr | in | SFTP + HTTPS + S3_DIRECT |
| 24 | firmcontact | out | SFTP + HTTPS + S3_DIRECT |
| 27 | focus | in, out | SFTP + HTTPS + S3_DIRECT |
| 28 | FormT | in, out | SFTP + HTTPS + S3_DIRECT |
| 29 | fss | in | SFTP + HTTPS + S3_DIRECT |
| 30 | iard | foia_download, foia_upload | SFTP + HTTPS + S3_DIRECT |
| 31 | livevolusr | in | SFTP + HTTPS + S3_DIRECT |
| 32 | mpp | in, in2 | SFTP + HTTPS + S3_DIRECT |
| 33 | msrb_avts | in | SFTP + HTTPS + S3_DIRECT |
| 34 | nasdaq_vntv | in | SFTP + HTTPS + S3_DIRECT |
| 35 | nav | in | SFTP + HTTPS + S3_DIRECT |
| 36 | nq_clrg | in | SFTP + HTTPS + S3_DIRECT |
| 37 | NVXPLYTC | in, out | SFTP + HTTPS + S3_DIRECT |
| 38 | otc | in | SFTP + HTTPS + S3_DIRECT |
| 39 | pfrd | file_in, file_out, out, section1To4_report_out, section5_event_report_out, section6_event_report_out | SFTP + HTTPS + S3_DIRECT |
| 40 | phlxdnc | in | SFTP + HTTPS + S3_DIRECT |
| 41 | pmap | covered_agency_in, covered_agency_out, enhanced_margin_in, enhanced_margin_out, out | SFTP + HTTPS + S3_DIRECT |
| 42 | r4530 | in, out | SFTP + HTTPS + S3_DIRECT |
| 43 | rdms | incoming, xbrl | SFTP + HTTPS + S3_DIRECT |
| 44 | regm | in, out | SFTP + HTTPS + S3_DIRECT |
| 45 | rema | in | SFTP + HTTPS + S3_DIRECT |
| 46 | rex | in, out | SFTP + HTTPS + S3_DIRECT |
| 47 | rgstrn_submission | out | SFTP + HTTPS + S3_DIRECT |
| 48 | sbs | in | SFTP + HTTPS + S3_DIRECT |
| 49 | shortinterest | out | SFTP + HTTPS + S3_DIRECT |
| 50 | shorts | in, out | SFTP + HTTPS + S3_DIRECT |
| 51 | slate | feedback, filings | SFTP + HTTPS + S3_DIRECT |
| 52 | ssmart | in | SFTP + HTTPS + S3_DIRECT |
| 53 | stockrecord | in, out | SFTP + HTTPS + S3_DIRECT |
| 54 | tdr | in_ice, in_ndq, out | SFTP + HTTPS + S3_DIRECT |
| 55 | teamconn | in | SFTP + HTTPS + S3_DIRECT |
| 56 | thresholdlist | out | SFTP + HTTPS + S3_DIRECT |
| 57 | tradejrnls | agency, agencyc, clearing_cds, clearing_orf, equity_adf, equity_orf, trace_ca, trace_cb, trace_cb_144a, trace_cb_144ac, trace_cbc, trace_eod_sp, trace_eod_spc, trace_eod_tsds, trace_eod_tsdsc, trace_sp, trace_sp_144a, trace_sp_144ac, trace_trsry, tsar, tsarc | SFTP + HTTPS |
| 58 | trpcy_srvc_erd | in_cds | SFTP + HTTPS + S3_DIRECT |
| 59 | workday | from_vms, from_workday, to_vms, to_workday | SFTP + HTTPS + S3_DIRECT |
| 60 | wssdmcredreg | out | SFTP + HTTPS + S3_DIRECT |