Skip to main content
Technical Notice

Upcoming Change to FINRA fileX SFTP SSH Ciphers and Algorithms

June 11, 2025

As a part of FINRA’s security enhancements, we are changing SFTP server's SSH Ciphers and Algorithms. 

What this means for you:

All users who transfer files via the fileX SFTP must update their configurations to use the newly supported SSH Ciphers and Algorithms. Failure to do so will result in an inability to access the fileX application via SFTP.

What's not affected:

There is no impact for non-SFTP fileX integrations.

Next Steps:

Please review the list of newly supported Ciphers and Algorithms provided below and ensure your systems are updated accordingly.  Timeline for the change is also included below

Office Hours:

The FINRA fileX team will be hosting office hours related to this change in July 2025 and August 2025. If you are interested in signing up for the  office hours or have advance questions, please provide your email address and questions here. We appreciate your attention to this update and your continued partnership.

New Supported Ciphers and Algorithms List

  New Supported Ciphers and Algorithms
1Supported SSH Ciphers
  1. aes128-ctr
  2. [email protected]
  3. aes192-ctr
  4. aes256-ctr
  5. [email protected]
2Supported SSH Key Exchange Algorithms
  1. mlkem768x25519-sha256
  2. mlkem768nistp256-sha256
  3. mlkem1024nistp384-sha384
  4. diffie-hellman-group14-sha256
  5. diffie-hellman-group16-sha512
  6. diffie-hellman-group18-sha512
  7. ecdh-sha2-nistp384
  8. ecdh-sha2-nistp521
  9. ecdh-sha2-nistp256
  10. diffie-hellman-group-exchange-sha256
  11. [email protected]
  12. curve25519-sha256
3Supported SSH MAC Algorithms
  1. [email protected]
  2. [email protected]

The Ciphers and Algorithms that will no longer be supported are crossed out below

 Current Ciphers and Algorithms
Supported SSH Ciphers
  1. aes128-cbc
  2. aes192-cbc
  3.  aes256-cbc
  4. aes128-ctr
  5. aes192-ctr
  6. aes256-ctr
Supported SSH Key Exchange Algorithms
  1. diffie-hellman-group14-sha1
  2. diffie-hellman-group-exchange-sha256
Supported SSH MAC Algorithms
  1. hmac-sha1
  2. hmac-sha1-96
  3. hmac-sha256
  4. [email protected]

Timeline

MilestoneTarget DateCompleted (Yes/No)
Office Hours 1July 9, 2025Yes
QAINTJuly 14, 2025Yes
Office Hours 2Aug. 2025No
PRODEnd of Feb. 2026No

fileX User guide has Production and QA environment details and can be found here.
 

FINRA Applications That Support SFTP File Transfer Method

 App NameApp Space NameTransfer Methods Supported
1606nms

in, 

out

SFTP + HTTPS + S3_DIRECT
2acatsinSFTP + HTTPS + S3_DIRECT
3adv

in, 

out

SFTP + HTTPS + S3_DIRECT
4aepstockrec

in, 

out

SFTP + HTTPS + S3_DIRECT
5annual_audit_filingoutSFTP + HTTPS + S3_DIRECT
6ats_exempt_trd

in, 

out

SFTP + HTTPS + S3_DIRECT
7bd_auditor_dsclr_feedoutSFTP + HTTPS + S3_DIRECT
8beaconinSFTP + HTTPS + S3_DIRECT
9blotters

data, 

legend, 

out

SFTP + HTTPS + S3_DIRECT
10blshts

in, 

out

SFTP + HTTPS + S3_DIRECT
11boxoutSFTP + HTTPS + S3_DIRECT
12cboedncinSFTP + HTTPS + S3_DIRECT
13cccs

in, 

out

SFTP + HTTPS + S3_DIRECT
14ceplatfm

courseproviders_in, courseproviders_out,

courseresults_in,

courseresults_out,

courses_in,

courses_out,

incidentreports_in

SFTP + HTTPS + S3_DIRECT
15cfportalinSFTP + HTTPS + S3_DIRECT
16cleansharesinSFTP + HTTPS + S3_DIRECT
17clmoutSFTP + HTTPS + S3_DIRECT
18crd

incoming_designations, incoming_filings,

reports

results

SFTP + HTTPS + S3_DIRECT
19dtcc-fdrinSFTP + HTTPS + S3_DIRECT
20edgar_pdsinSFTP + HTTPS + S3_DIRECT
21erdmdsfundSFTP + HTTPS + S3_DIRECT
22etf

in, 

in_pcf_main, 

in_pcf_supp

SFTP + HTTPS + S3_DIRECT
23fdrinSFTP + HTTPS + S3_DIRECT
24firmcontactoutSFTP + HTTPS + S3_DIRECT
27focus

in, 

out

SFTP + HTTPS + S3_DIRECT
28FormT

in, 

out

SFTP + HTTPS + S3_DIRECT
29fssinSFTP + HTTPS + S3_DIRECT
30iard

foia_download, 

foia_upload

SFTP + HTTPS + S3_DIRECT
31livevolusrinSFTP + HTTPS + S3_DIRECT
32mpp

in, 

in2

SFTP + HTTPS + S3_DIRECT
33msrb_avtsinSFTP + HTTPS + S3_DIRECT
34nasdaq_vntvinSFTP + HTTPS + S3_DIRECT
35navinSFTP + HTTPS + S3_DIRECT
36nq_clrginSFTP + HTTPS + S3_DIRECT
37NVXPLYTC

in,

out

SFTP + HTTPS + S3_DIRECT
38otcinSFTP + HTTPS + S3_DIRECT
39pfrd

file_in,

file_out,

out,

section1To4_report_out,

section5_event_report_out,

section6_event_report_out

SFTP + HTTPS + S3_DIRECT
40phlxdncinSFTP + HTTPS + S3_DIRECT
41pmap

covered_agency_in,

covered_agency_out,

enhanced_margin_in,

enhanced_margin_out,
in,

out

SFTP + HTTPS + S3_DIRECT
42r4530

in,

out

SFTP + HTTPS + S3_DIRECT
43rdms

incoming,

xbrl

SFTP + HTTPS + S3_DIRECT
44regm

in, 

out 

SFTP + HTTPS + S3_DIRECT
45remainSFTP + HTTPS + S3_DIRECT
46rex

in, 

out 

SFTP + HTTPS + S3_DIRECT
47rgstrn_submissionoutSFTP + HTTPS + S3_DIRECT
48sbsinSFTP + HTTPS + S3_DIRECT
49shortinterestoutSFTP + HTTPS + S3_DIRECT
50shorts

in, 

out 

SFTP + HTTPS + S3_DIRECT
51slate

feedback, 

filings

SFTP + HTTPS + S3_DIRECT
52ssmartinSFTP + HTTPS + S3_DIRECT
53stockrecord

in, 

out 

SFTP + HTTPS + S3_DIRECT
54tdr

in_ice, 

in_ndq, 

out

SFTP + HTTPS + S3_DIRECT
55teamconninSFTP + HTTPS + S3_DIRECT
56thresholdlistoutSFTP + HTTPS + S3_DIRECT
57tradejrnls

agency,

agencyc,

clearing_cds,

clearing_orf,

equity_adf,

equity_orf,

trace_ca,

trace_cb,

trace_cb_144a,

trace_cb_144ac,

trace_cbc,

trace_eod_sp,

trace_eod_spc,

trace_eod_tsds,

trace_eod_tsdsc,

trace_sp,

trace_sp_144a,

trace_sp_144ac,

trace_trsry,

tsar,

tsarc

SFTP + HTTPS
58trpcy_srvc_erdin_cdsSFTP + HTTPS + S3_DIRECT
59workday

from_vms,

from_workday,

to_vms,

to_workday

SFTP + HTTPS + S3_DIRECT
60wssdmcredregoutSFTP + HTTPS + S3_DIRECT