CLS Gateway Elimination project SWIFT Operations Forum - EMEA Damien Vanderveken 27-29 November 2013 Amsterdam

Session objectives Objective of today is to share updated information on the new connectivity solution and its associated recovery the SWIFT time line an update on items raised by the CLS members support related aspects of the new solution CLS Gateway Elimination Project – 28 November 2013

Agenda SWIFT Connectivity solution SWIFT time line Items raised by members Support of new solution CLS Gateway Elimination Project – 28 November 2013

STP channels for ISO20022 messages 3 Footprint options SNL upgrade required to: Access the new MI channel Introduce new resiliency solution (stateless footprint and replay function) Provide direct connection to back-office via WebSphere MQ. Solution designed for high volume users available to all CLS members New MI channel option Communication Software (SNL - SAG) SWIFT Back - Office Classical & bespoke options Classical: leverages current Messaging software SAG / SNL licence for low volume users Bespoke: CBT specification available to high volume users upon request IA SnF Messaging Software Communication Software (SNL - SAG) SWIFT Back - Office CLS Gateway Elimination Project – 28 November 2013 CLS_STAR_member road shows_final_New York Sep_2013 4

MI channel – Solution overview WebSphere MQ queue manager New component in charge of MQ client connection & support for MI Channel, fully integrated in SNL & SAG Direct connection to back-office applications over MQ series SWIFTNet Store-and-Forward Emission Q(s) Transmit Q(s) Used for emission CLS SnF Qs Q1 Alliance Gateway Notification Q Q2 CLS member Back-Office application MI Channel component MI Channel Error Q FIFO ordering guaranteed. High throughput thanks to batching, compression and new transport protocol MQ client MI Channel Q1 Member SnF Qs Reception Q(s) Q2 NR Q(s) Q3 Used for reception HSMs Operational efficiency and added resiliency (replay) thanks to Store-and-Forward Notification Q Error Q

MI Channel - recovery with replay WebSphere MQ queue manager Alliance Gateway Data Centre 1 Active Back-Office application MI Channel component Standby Asynchronous replication No replication done at the MQ level. Different MQ queues are used by the two Alliance Gateways HSMs WebSphere MQ queue manager SWIFTNet Store-and-Forward Alliance Gateway Data Centre 2 Back-Office application MI Channel component Reception side: Back Office must identify either the starting point for replay or the last OSN received and associated reception time. MI Channel component must then be started in recovery mode with the above parameters to trigger the message replay. Emission side: Back office application must resend all messages already sent for which no notification was received with a PDE Normal message reception resumes automatically once replay is completed. Back Office application to use MQ queues associated with secondary Gateway HSMs CLS Gateway Elimination Project – 28 November 2013

Agenda SWIFT Connectivity solution SWIFT time line Issues raised by members Support of new solution CLS Gateway Elimination Project – 28 November 2013

SWIFT timeline 2013 – 2014 overview Q3’13 Q4’13 Q1’14 Q2’14 Q3’14 Q4’14 Q1’15 Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Pilot Pilot CLS Community – patches required for MI Channel (pilot phase) SAG 7.0.25 Release date: 24 January 2014 OS: AIX, Windows, Solaris and Linux SNL/SAG Admin GUI 7.0.26 Release date: 20 February 2014 OS: AIX and Windows Tentative MI Channel Interface specs Release date: 21 June 2013 First version covering main message flow excluding replay and LAU Release date: 27 September 2013 Second version adding specifications for replay and LAU SNL / SAG 7.0.30 GD Release date: Dec 2014 - TBC scope: Cumulative (inc. 7.0.28) Yearly maintenatnce patch containing functional enhancements and fixes MI Channel Interface specs Release date: December 2013 Third version including feedback received from CLS vendors and members CLS Community – patches patches required for MI Channel (production usage) SNL / SAG /SAG Admin GUI 7.0.28 Release date: 25 April 2014 OS: AIX, Windows, Solaris and Linux CLS eForms Release date: February 2013 Scope: Subscription to the CLS messaging services (Browse and SnF) for JAS and production Subscription to MI channel

Agenda SWIFT Connectivity solution SWIFT time line Items raised by members Support of new solution CLS Gateway Elimination Project – 28 November 2013

MI channel – resiliency enhancement Active MI channel – resiliency enhancement Hot Standby WebSphere MQ queue manager Alliance Gateway MQ client MI Channel component SWIFTNet Store-and-Forward Emission Q(s) MI Channel Transmit Q(s) Used for emission CLS SnF Qs Q1 Notification Q Q2 CLS Back-Office application HSMs Error Q Q1 Alliance Gateway Member SnF Qs Reception Q(s) MI Channel component Q2 Objective Automate failover process to eliminate manual interventions and associated downtime Preserve message sequencing per queue to ensure business logic is preserved. NR Q(s) MQ client MI Channel Q3 Used for reception Hot Standby MI Channel Component will automatically acquire the MQ queues used for emission and the SnF queues upon failure of the Active host Notification Q Error Q HSMs

CLS Browse service - User Authentication Single Sign On enhancing user experience when accessing CLS Browse service Support for Personal token certificates - Offers 2 factor authentication - Single token sufficient to connect via multiple data centres Support for HSM certificates - Multiple certificates per user may be required to connect via multiple data centres - Identity federation to link different credentials to same identity - HSM usability evolution looking at simplifying operational management Strong assurance on personal identity - Individual users require personal certificates, sharing is not supported Virtual SWIFTNet user can be used when the certificate is linked to a single virtual user (provides operational benefits without removing certificate accountability) CLS Gateway Elimination Project – 28 November 2013

Agenda SWIFT Connectivity solution SWIFT time line Items raised by members Support of new solution CLS Gateway Elimination Project – 28 November 2013

New CLS connectivity solution – When to call SWIFT? Clearer demarcation between CLS support and SWIFT support New CLS connectivity over Store-and-Forward messaging SWIFT operations will be a lot simpler Call SWIFT support for any issues related to connectivity! CLS Gateway Elimination Project – 28 November 2013

Q&A CLS Gateway Elimination Project – 28 November 2013

Thank you CLS Gateway Elimination Project – 28 November 2013