Aug 25, 2026
Eurex Repo
Eurex Repo Readiness Newsflash | Introduction of New DBAG Public Key Infrastructure (PKI) and DBAG Certificate Authority (CA)
With this Newsflash, Eurex Repo announces a change in the Public Key Infrastructure (PKI) and the Certificate Authority (CA) used to sign the client certificates for Repo F7 API, FIX and GUI.
Deutsche Börse has introduced a new Public Key Infrastructure (PKI) with a new Certificate Authority (CA) on 24 August 2026.
Starting 24 August 2026, the process provided in the Member Section of the Deutsche Börse Group for generating client certificates for selected interfaces will automatically use the new DBAG PKI infrastructure.
The following F7 trading related interfaces are affected:
- Repo F7 (API, GUI, FIX)
Participants using one of the affected interfaces must prepare for the PKI transition and renew their client certificates over the next few months. Client certificates signed by the existing PKI/CA remain valid and may be used in parallel with certificates issued by the new PKI/CA until 18 December 2026. Usage of client certificates signed by the old PKI/CA beyond 18 December cannot be guaranteed.
All certificates issued under the previous PKI/CA must be renewed via the Member Section no later than this date. To support participants during the transition, a new column named “Certificate Type” has been added to the list of certificates displayed for each account in the Member Section of Deutsche Börse Group.
Each client certificate in the Member Section of Deutsche Börse Group can now easily be identified. Certificates signed by the existing DBAG PKI/CA are marked as “Old”, while client certificates signed by the new DBAG PKI/CA are marked as “New”.
Participants must complete the following steps for each affected interface:
- A. Log in to the Member Section of Deutsche Börse Group.
- B. Download one or more new client certificates for the relevant interface. As of 24 August 2026, newly generated client certificates will be automatically signed by the new DBAG PKI/CA.
- C. Install the new client certificate(s) in the browser used for the GUI applications or store it in the relevant application keystore for the F7 API and F7 FIX interfaces.
- D. Verify that the affected interface can be accessed successfully with the new certificate.
- E. After successful verification, participants may revoke and delete the corresponding old client certificate
For questions or further support, please contact Customer Technical Support and customers can reach their Technical Key Account Manager via the VIP number +49 (0) 69 2 11-1 08 88, or per email: cts@deutsche-boerse.com.
Kind regards,
Your Client Services Team
Further information
Recipients: | All Trading Participants of Eurex Repo and Vendors | |
Target groups: | Front Office/Trading, IT/System Administration | |
Contact: | Your Technical Key Account Manager via VIP number or cts@deutsche-boerse.com | |
Web: | www.eurex.com/repo |
