Find
Aug 25, 2026

Eurex Clearing

Introduction of updated Public Key Infrastructure (PKI)

Eurex Clearing Circular 058/26: Introduction of updated Public Key Infrastructure (PKI)

1. Introduction

Deutsche Börse has introduced a new Public Key Infrastructure (PKI) with a new Certificate Authority (CA) on 24 August 2026.

As part of planned security enhancements, Deutsche Börse Group updates its Public Key Infrastructure (PKI) which will then include support for modern cryptographic algorithms, enhanced security features, and improved scalability.

Starting 24 August 2026, the process provided in the Member Section of Deutsche Börse Group for generating client certificates for selected interfaces will automatically use the new DBAG PKI infrastructure.

The following trading related systems and interfaces are affected:

  • T7 Web GUI
  • Repo F7 (API, GUI, FIX)
  • Buy-In B7 (GUI)

Please note: In production, certificates created with the new PKI infrastructure can only be used from 31 August 2026 onwards.

2. Required action

Certificates created before this date with the previous infrastructure must be renewed in the Member Section by 18 August 2026. Until then they remain valid and usable for connecting. This applies for the Clearing Graphical User Interfaces and for FIXML connectivity.  Usage of client certificates signed by the old PKI/CA beyond 18 August 2026 cannot be guaranteed. 

All certificates issued under the previous PKI/CA must be renewed via the Member Section no later than this date.  

3. Details

To establish and ensure an encrypted connection between the participant, the Clearing Graphical User Interfaces and the FIXML Interface, the creation and usage of client certificates signed by Deutsche Börse’s Certificate Authority (CA) is required for leased line connections.

The certificate standard is X.509v3 using the sha256RSA signature algorithm. 

To be able to use DBAG signed client certificates the following steps need to be carried out: 

  • Create a new FIXML certificate using Deutsche Börse’s Certificate Generator for C7 FIXML technical account in the Member Section of Deutsche Börse Group.  
  • Download new client certificate (PKCS #12 file) which can be used as keystore in your application. 


Unless the context requires otherwise, terms used and not otherwise defined in this circular shall have the meaning ascribed to them in the Clearing Conditions or FCM Clearing Conditions of Eurex Clearing AG, as applicable. 


Further information

Recipients:

All Clearing Members, ISA Direct Clearing Members, Disclosed Direct Clients of Eurex Clearing AG and vendors 

Target groups:

Front Office/Trading, Middle + Backoffice, IT/System Administration, Auditing/Security Coordination

Contact: Technical Key Account Manager directly via your VIP number, or send an e-mail to cts@deutsche-boerse.com  
Web: www.eurex.com/ec-en
Authorized by: Manfred Matusza