Xemac: Mandatory client version for the February Release - Update

Note: This announcement, originally published on 15 December 2023, provides updated security enhancements. Changes are highlighted.

Clearstream Banking AG¹ will implement the Xemac^® version 5.14 on

23 February 2024 (end of day)

Impact on clients

All participating clients must install Xemac version 5.14 by 23 February 2024 at the latest. After this date, access to Xemac® version 5.13 will no longer be possible.

Xemac 5.14 will be become active on 26 February 2024. Until then, only version 5.13 will be active.

Security enhancements

The new Xemac client will not include any functional changes, but will include several security enhancements:

Certificate update 

The cipher that is currently used will be changed from TLS_RSA_WITH_AES_128_CBC_SHA256 to ECDHE_RSA_WITH_AES_256_GCM_SHA384 due to potential vulnerabilities.

Securely encrypted channel

Xemac 5.14 will only use securely encrypted channels for both technical and functional communication.

Further information

For further information, clients may contact Clearstream Banking Client Services or their Relationship Officer.

------------------------------------------

1. This Announcement is published by Clearstream Banking AG (CBF), registered office at Mergenthalerallee 61, 65760 Eschborn, Germany, registered with the Commercial Register of the District Court in Frankfurt am Main, Germany, under number HRB 7500.