Find
06 Sep 2022

Eurex

T7 connectivity options: Implementation of additional options to strengthen the protection of critical information infrastructure

Eurex Circular 085/22 T7 connectivity options: Implementation of additional options to strengthen the protection of critical information infrastructure

1.  Introduction

Eurex will make mandatory changes regarding data transmission via the T7 trading interfaces. These changes implement regulatory requirements as information transmitted via public communication networks is subject to the risk of unauthorized interception, manipulation, or misuse.

The regulation on Critical Infrastructures (KRITIS) enforced by the Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik – BSI) specifies that Eurex as the operator of a trading venue needs to adhere to the requirements which include the encryption of data during transfer via public networks.

To support Trading Participants with the implementation of their security requirements and in line with the requirements stipulated for the protection of critical information infrastructure, Eurex has already begun implementing additional connectivity options to implement Transport Layer Security (TLS) for sensitive data in critical business areas.

Together with the introduction of T7 Release 10.1 in June 2022, Eurex introduced an additional TLS connectivity option (payload encryption) for the FIX LF interface. The introduction of a TLS connectivity option for the ETI interface will be implemented with T7 Release 11.0 in November 2022. The ETI TLS connectivity option will be provided for Low Frequency (LF) sessions only.

More information about the Mandatory Interface Encryption initiative is provided on the Eurex website www.eurex.com under the following link:

Support > Initiatives & Releases > Project Readiness > Mandatory Interface Encryption

There, you will also find system documentation, circulars, timeline and much more information.

2.  Required action

Trading Participants should be aware that support for the connectivity option without TLS will be withdrawn in Q1/2023 for FIX LF Sessions and in Q3/2023 for ETI LF sessions. Existing applications must be adapted to use the FIX LF TLS or ETI LF TLS connectivity option at the earliest possible opportunity. 

Trading Participants with ETI HF sessions should be aware that applications must be adapted to use password encryption at the earliest possible opportunity.

Trading Participants using ETI HF sessions from a location outside of Eurex Exchange's Equinix FR2 facility must either replace the HF session with a ETI LF session or transfer the session to an installation within Eurex Exchange's Equinix FR2 facility. The possibility to order production HF sessions for non-Equinix FR2 installations in the Member Section and the use of production HF sessions outside of Eurex Exchange's Equinix FR2 facility will be withdrawn in Q3/2023.

3.  Details

To support Trading Participants in their adoption of the additional TLS connectivity options, both connectivity options will initially be offered in parallel. Usage of the FIX LF TLS will become mandatory in Q1/2023 and the ETI TLS connectivity option will become mandatory in Q3/2023.

More information about the FIX LF TLS connectivity option is provided in the Network Access Guide which is available on the Eurex website www.eurex.com under the following link: Support > Initiatives & Releases > T7 Release 11.0 > Network Access

3.1 Production Environments

HF sessions are currently available for use not only within Eurex Exchange's Equinix FR2 facility, but also in other locations connected to Eurex via public networks. The usage of ETI HF production sessions from locations outside of Eurex exchanges’ Equinix FR2 facility will no longer be possible in the T7 production environment from the end of Q3/2023.

3.2 Simulation and Disaster Recovery Environments

The usage of ETI HF sessions from locations outside of Eurex Exchange's Equinix FR2 facility for the T7 simulation environment will still be possible. HF sessions will also continue to be available in the event of the disaster recovery scenario for production. 

Password encryption for High Frequency (HF) sessions will be implemented in T7 Release 11.1, which is currently planned for Q2/2023, and will become mandatory with the introduction of T7 Release 12.0 which is currently planned for Q4/2023.

The T7 market data and reference data interfaces are not affected by the changes.

The following tables provide an overview of the respective introduction and decommissioning dates for the respective connectivity options, password encryption und usage on HF sessions from outside of Deutsche Börse’s Equinix FR2 facility. The exact dates will be announced separately.

Encryption

Environment

T7 Release

Introduction date

Mandatory usage 

FIX LF Encryption


Simulation 


10.1


02.05.2022


Q1/2023


ETI LF Encryption


Simulation


11.0


12.09.2022


Q3/2023


ETI HF Session Password Encryption


Simulation


11.1


Q1/2023


Q4/2023


Encryption

Environment

T7 Release

Introduction date

Mandatory usage 

FIX LF Encryption


Production


10.1


27.06.2022


Q1/2023


ETI LF Encryption


Production


11.0


21.11.2022


Q3/2023


ETI HF Session Password Encryption


Production


11.1


Q2/2023


Q4/2023

Event

Environment

T7 Release

Decomissioning date

HF Session usage outside the Equinix FR2 facility

Production

12.0

Q3/2023

Further information

Recipients:

All Trading Participants of Eurex Deutschland and Vendors

Target groups:

Front Office/Trading, IT/System Administration

Contact:

Technical Key Account Manager via your VIP number or cts@deutsche-boerse.com

Web:

Support > Initiatives & Releases > Project Readiness > Mandatory Interface Encryption

Authorized by:

Wolfgang Eholzer


Market Status

XEUR

The market status window is an indication regarding the current technical availability of the trading system. It indicates whether news board messages regarding current technical issues of the trading system have been published or will be published shortly.

Please find further information about incident handling in the Emergency Playbook published on the Eurex webpage under Support --> Emergencies and safeguards. Detailed information about incident communication, market re-opening procedures and best practices for order and trade reconciliation can be found in the chapters 4.2, 4.3 and 4.5, respectively. Concrete information for the respective incident will be published during the incident via newsboard message. 

We strongly recommend not to take any decisions based on the indications in the market status window but to always check the production news board for comprehensive information on an incident.

An instant update of the Market Status requires an enabled up-to date Java™ version within the browser.