Please bookmark this page and check back often for the latest updates.

As part of our modernization efforts to improve resiliency across our payments products and services for clients, a new strategic data center has been built for our Managed File Transfer (MFT) client transmissions.

The enhancements will require the move of MFT traffic to the new data center and will begin in 2024. If you connect to MFT environments, then you will be impacted by this move and need to begin testing as soon as possible. The MFT UAT environment is currently available for testing.

Impacts

All MFT transmissions will require new Fully Qualified Domain Names (FQDN) and IP address changes for all J.P. Morgan servers. You will have to make changes to your file transmission infrastructure to accommodate these changes.

Given the nature and extent of these changes, you should plan for an extensive amount of testing ahead of the transition. Get started by reviewing the links below:

Examples of the types of changes that may be required include:

If you are using widely supported applications to exchange files with us, they must be updated to their most current release levels to meet the applicable security standards for protocols, ciphers, message authentication, key exchange algorithms and host key algorithms.

If your application is out of date and cannot support the latest security standards (RFCs 4251-4254), then it is possible that it must be replaced with a new application with a more current set of capabilities. Migration to the new J.P. Morgan environment will not be possible if security standards cannot be met, and safety net accommodations can only be made available for a very limited time.

If you have dedicated clients with network connectivity and point-to-point Virtual Private Network (VPN) solutions over the J.P. Morgan Business Partner Network, you must make several changes during the migration. Client-owned infrastructure components in the J.P. Morgan data centers will be moved, and solutions must be re-engineered.

Due to the nature of this work, it is possible that some of this will require your technical team's engagement for infrastructure design and implementation, and for application cutover.

  • Firewall Rules — Your firewalls must be updated to allow traffic to and from the new J.P. Morgan data centers.
  • Hostname Files and Key Stores — If your application uses a known host configuration to cross-reference IP addresses and domain names to public encryption keys (typical with SFTP applications), then this configuration must be changed to accommodate the new J.P. Morgan addresses.
  • Internet and SOCKS Proxies — New IP addresses with fully qualified domain names may need to be configured for internet and SOCKS proxies, if used in your environment.
  • Application Whitelists — Your administrators must make changes to any applications which use IP allow list in their configuration to improve cyber controls.
  • AS2 Configuration Changes — If you use an AS2 application, your network and application administrators will have to update web and SOCKS proxies to reconfigure bi-directional AS2 traffic over non-standard port 10443.
  • Connect:Direct Configuration Changes – If you use Connect:Direct protocol, your NDM administrators must add new nodes to send traffic over.
  • Business Continuity Configuration — Any changes that are made to your primary configuration must also be applied to your contingency setup.

This is not an exhaustive list of impacts but gives you an idea of the types of things that must be addressed. Your specific actions are determined by your environment and configuration.
 
We will communicate additional details as they become available. To ensure that you receive these communications, please make sure that your J.P. Morgan relationship team has accurate email addresses for the members of your technical team who are responsible for Managed File Transfer.

To ensure technical specifications and guidance remains accurate, please do not translate this page into any other language.

Support

If you need help with your testing or have any questions about the migration, please email us at jpmc.datacenter.migrations@jpmchase.com.