OATS File Transmission Encryption Protocol Changes
On March 2, 2015, FINRA will be upgrading the File Transmission encryption protocol in the OATS Production (PD) environment and will no longer support the use of the SSLv3 encryption protocol. These changes will take effect in the OATS Certificate Test (CT) environment on February 16, 2015. Any firm or OSO that submits data to one of these environments after the implementation dates via a method using the SSLv3 encryption protocol will not be able to connect to FINRA servers. As such, all firms and OSOs are strongly encouraged to test connectivity and file submission in the CT environment prior to the upgrade in Production.
| Transmission Method | Details |
|---|---|
| IFT |
If the current browser used for IFT file transmission uses the SSLv3 encryption protocol, then firms or OSOs must upgrade their browser. |
| FTP |
No impact |
| SFTP |
If the current SFTP transmission method uses the SSLv3 encryption protocol, then firms or OSOs must upgrade their file transfer software not to use SSLv3. |
| Web |
If the current browser used for web connectivity to FINRA uses SSLv3, then firms or OSOs must upgrade their browser. |
Please contact the OATS Helpdesk at 1-800-321-6273 with any questions related to this report.