As part of our initiative to conform to the new requirements issued by Payment Card Industry Security Standard Council, you are required to make changes to your WIBS service as listed in this notice to ensure uninterrupted services.

This change is impacting you since you are using a WIBS Lite or Standard SFTP solution linked to the following environments:

• Production over Internet: ssiw.qvalent.com/192.170.86.151
• Test/Support over Internet: ssiw.support.qvalent.com/203.39.159.31

The SSH host keys used on the Production and Test hosts now requires a stronger RSA 2048-bit host keys instead of existing 1024bit keys.

In order to continue connecting to the service, your SSH client must be configured to expect and accept the new known host key value. If you do not take this step, your connectivity to our SFTP server will fail leading to failure in file transfer that will require manual intervention by your IT and Finance staff.

The Payment Card Industry Security Standard Council has deemed that all RSA key sizes should be a minimum of 2048bits and hence Westpac is changing its SSH host Keys to RSA 2048bit host keys.

The change is scheduled for the following dates:

• Test/Support over Internet: ssiw.support.qvalent.com/203.39.159.31 - Monday 8th May 2017 @ 10:00am AEST
• Production over Internet: ssiw.qvalent.com/192.170.86.151 - Monday 7th August 2017 @ 10:00am AEST

We encourage you to perform UAT testing in the Test/Support environment as soon as possible after the change to ensure compatibility with all SSH client software which connects to the WIBS SFTP service

Read this detailed change advice, for further information regarding this change read Further Information Regarding Westpac WIBS (Qvalent) SSH Host Key Change

Add the following known host keys to your known host file as appropriate. This can be done at any time before the cut off dates:

Identify all SFTP client instances which interact with the SFTP server and take action to prepare for this change in advance.

Refer to SFTP client software vendor documentation for change preparation steps for your SFTP client software to ensure compatibility with 2048-bit RSA keys and to load a new known host key values.

Understand and be prepared to instigate your iLink BCP solution in the event of any issues post change. This includes how to manually transfer files from your finance applications into/from iLink in the event of a SFTP client connection failure.

Email wibs_support@qvalent.com or phone the Helpdesk team on 1300 726 370 between 8.30am to 5.30pm (AEST), Monday to Friday.