1. Introduction
Eurex will make mandatory changes regarding data transmission via the T7 trading interfaces. These changes implement regulatory requirements as information transmitted via public communication networks is subject to the risk of unauthorized interception, manipulation, or misuse.
The regulation on Critical Infrastructures (KRITIS) enforced by the Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik – BSI) specifies that Eurex as the operator of a trading venue needs to adhere to the requirements which include the encryption of data during transfer via public networks.
To support Trading Participants with the implementation of their security requirements and in line with the requirements stipulated for the protection of critical information infrastructure, Eurex has already begun implementing additional connectivity options to implement Transport Layer Security (TLS) for sensitive data in critical business areas.
Together with the introduction of T7 Release 10.1 in June 2022, Eurex introduced an additional TLS connectivity option (payload encryption) for the FIX LF interface. The introduction of a TLS connectivity option for the ETI interface will be implemented with T7 Release 11.0 in November 2022. The ETI TLS connectivity option will be provided for Low Frequency (LF) sessions only.
More information about the Mandatory Interface Encryption initiative is provided on the Eurex website www.eurex.com under the following link:
Support > Initiatives & Releases > Project Readiness > Mandatory Interface Encryption
There, you will also find system documentation, circulars, timeline and much more information.
2. Required action
Trading Participants should be aware that support for the connectivity option without TLS will be withdrawn in Q1/2023 for FIX LF Sessions and in Q3/2023 for ETI LF sessions. Existing applications must be adapted to use the FIX LF TLS or ETI LF TLS connectivity option at the earliest possible opportunity.
Trading Participants with ETI HF sessions should be aware that applications must be adapted to use password encryption at the earliest possible opportunity.
Trading Participants using ETI HF sessions from a location outside of Eurex Exchange's Equinix FR2 facility must either replace the HF session with a ETI LF session or transfer the session to an installation within Eurex Exchange's Equinix FR2 facility. The possibility to order production HF sessions for non-Equinix FR2 installations in the Member Section and the use of production HF sessions outside of Eurex Exchange's Equinix FR2 facility will be withdrawn in Q3/2023.
3. Details
To support Trading Participants in their adoption of the additional TLS connectivity options, both connectivity options will initially be offered in parallel. Usage of the FIX LF TLS will become mandatory in Q1/2023 and the ETI TLS connectivity option will become mandatory in Q3/2023.
More information about the FIX LF TLS connectivity option is provided in the Network Access Guide which is available on the Eurex website www.eurex.com under the following link: Support > Initiatives & Releases > T7 Release 11.0 > Network Access
3.1 Production Environments
HF sessions are currently available for use not only within Eurex Exchange's Equinix FR2 facility, but also in other locations connected to Eurex via public networks. The usage of ETI HF production sessions from locations outside of Eurex exchanges’ Equinix FR2 facility will no longer be possible in the T7 production environment from the end of Q3/2023.
3.2 Simulation and Disaster Recovery Environments
The usage of ETI HF sessions from locations outside of Eurex Exchange's Equinix FR2 facility for the T7 simulation environment will still be possible. HF sessions will also continue to be available in the event of the disaster recovery scenario for production.
Password encryption for High Frequency (HF) sessions will be implemented in T7 Release 11.1, which is currently planned for Q2/2023, and will become mandatory with the introduction of T7 Release 12.0 which is currently planned for Q4/2023.
The T7 market data and reference data interfaces are not affected by the changes.
The following tables provide an overview of the respective introduction and decommissioning dates for the respective connectivity options, password encryption und usage on HF sessions from outside of Deutsche Börse’s Equinix FR2 facility. The exact dates will be announced separately.
Encryption | | Environment | | T7 Release | | Introduction date | | Mandatory usage |
FIX LF Encryption
| | Simulation
| | 10.1
| | 02.05.2022
| | Q1/2023
|
ETI LF Encryption
| | Simulation
| | 11.0
| | 12.09.2022
| | Q3/2023
|
ETI HF Session Password Encryption
| | Simulation
| | 11.1
| | Q1/2023
| | Q4/2023
|
Encryption | | Environment | | T7 Release | | Introduction date | | Mandatory usage |
FIX LF Encryption
| | Production
| | 10.1
| | 27.06.2022
| | Q1/2023
|
ETI LF Encryption
| | Production
| | 11.0
| | 21.11.2022
| | Q3/2023
|
ETI HF Session Password Encryption
| | Production
| | 11.1
| | Q2/2023
| | Q4/2023 |
Event | | Environment | | T7 Release | | Decomissioning date |
HF Session usage outside the Equinix FR2 facility | | Production | | 12.0 | | Q3/2023 |
Further information
Recipients: | | All Trading Participants of Eurex Deutschland and Vendors |
Target groups: | | Front Office/Trading, IT/System Administration |
Contact: | | Technical Key Account Manager via your VIP number or cts@deutsche-boerse.com |
Web: | | Support > Initiatives & Releases > Project Readiness > Mandatory Interface Encryption |
Authorized by: | | Wolfgang Eholzer |