CLS Gateway Elimination project SWIFT Operations Forum - EMEA Damien Vanderveken 27-29 November 2013...

CLS Gateway Elimination projectSWIFT Operations Forum - EMEA

Damien Vanderveken

27-29 November 2013

Amsterdam

Session objectives

• Objective of today is to share updated information on– the new connectivity solution and its

associated recovery– the SWIFT time line – an update on items raised by the CLS

members– support related aspects of the new

solution

2CLS Gateway Elimination Project – 28 November 2013

CLS Gateway Elimination Project – 28 November 2013 3

Agenda

• SWIFT Connectivity solution

• SWIFT time line

• Items raised by members

• Support of new solution

STP channels for ISO20022 messages3 Footprint options


IA SnFMessaging Software

Communication Software (SNL - SAG)

Ba

ck -

O

ffic

e

• Classical: leverages current Messaging software SAG / SNL licence for low volume users

• Bespoke: CBT specification available to high volume users upon request

Classical & bespoke options

Communication Software (SNL - SAG)

Ba

ck -

O

ffic

e

• SNL upgrade required to:– Access the new MI channel

– Introduce new resiliency solution (stateless footprint and replay function)

– Provide direct connection to back-office via WebSphere MQ.

• Solution designed for high volume users available to all CLS members

New MI channel option

SWIFT

SWIFT

4CLS_STAR_member road shows_final_New York Sep_2013

MI channel – Solution overview

5

SWIFTNetStore-and-Forward

HSMs

CLS member

Back-Office application

Alliance Gateway

MQ client

MI Channel component

MI Channel

WebSphere MQ queue manager

Emission Q(s)

Transmit Q(s)

Notification Q

Reception Q(s)

NR Q(s)

Notification Q

Error Q

Error Q

Use

d f

or

em

issi

on

Use

d f

or

rece

ptio

nQ1

Q2

CL

S S

nF

Qs

Me

mb

er

Sn

F Q

s

Q1

Q2

Q3

Direct connection to back-office applications over MQ series

Direct connection to back-office applications over MQ series

New component in charge of MQ client connection & support for MI Channel, fully integrated in SNL & SAG

New component in charge of MQ client connection & support for MI Channel, fully integrated in SNL & SAG

MI Channel

FIFO ordering guaranteed. High throughput thanks to batching, compression and new transport protocol

FIFO ordering guaranteed. High throughput thanks to batching, compression and new transport protocol

Operational efficiency and added resiliency (replay) thanks to Store-and-Forward

Operational efficiency and added resiliency (replay) thanks to Store-and-Forward

MI Channel - recovery with replay



Alliance GatewayWebSphere MQ queue manager

HSMs



Alliance GatewayWebSphere MQ queue manager

HSMs

DataCentre

1

DataCentre

2

Asynchronous replication

Active

Standby



No replication done at the MQ level. Different MQ queues are used by the two Alliance Gateways

No replication done at the MQ level. Different MQ queues are used by the two Alliance Gateways

Emission side:Back office application must resend all messages already sent for which no notification was received with a PDE

Emission side:Back office application must resend all messages already sent for which no notification was received with a PDE

Reception side:Back Office must identify either the starting point for replay or the last OSN received and associated reception time. MI Channel component must then be started in recovery mode with the above parameters to trigger the message replay.

Reception side:Back Office must identify either the starting point for replay or the last OSN received and associated reception time. MI Channel component must then be started in recovery mode with the above parameters to trigger the message replay.

Normal message reception resumes automatically once replay is completed.

Normal message reception resumes automatically once replay is completed.

Back Office application to use MQ queues associated with secondary Gateway

Back Office application to use MQ queues associated with secondary Gateway


Agenda


• SWIFT time line

• Issues raised by members


Jul Aug Sep Oct Nov Dec Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec Jan Feb Mar

SWIFT timeline2013 – 2014 overview

Q3’13 Q4’13 Q1’14 Q2’14 Q3’14 Q4’14 Q1’15

Pilot

CLS Community – patches patches required for MI Channel (production usage)

SNL / SAG /SAG Admin GUI 7.0.28 Release date: 25 April 2014OS: AIX, Windows, Solaris and Linux

Pilot

MI Channel Interface specsRelease date: 21 June 2013•First version covering main message flow excluding replay and LAU

Release date: 27 September 2013•Second version adding specifications for replay and LAU

MI Channel Interface specsRelease date: December 2013•Third version including feedback received from CLS vendors and members

SNL / SAG 7.0.30 GDRelease date: Dec 2014 - TBCscope:•Cumulative (inc. 7.0.28)•Yearly maintenatnce patch containing functional enhancements and fixes

CLS eFormsRelease date: February 2013Scope:•Subscription to the CLS messaging services (Browse and SnF) for JAS and production•Subscription to MI channel

CLS Community – patches required for MI Channel (pilot phase)

SAG 7.0.25Release date: 24 January 2014OS: AIX, Windows, Solaris and Linux

SNL/SAG Admin GUI 7.0.26Release date: 20 February 2014OS: AIX and Windows


Agenda


• SWIFT time line



MI channel – resiliency enhancement

10


HSMsCLSBack-Office application

Alliance Gateway

MQ client


MI Channel

WebSphere MQ queue manager

Emission Q(s)

Transmit Q(s)

Notification Q

Reception Q(s)

NR Q(s)

Notification Q

Error Q

Error Q

Use

d f

or

em

issi

on

Use

d f

or

rece

ptio

nQ1

Q2

CL

S S

nF

Qs

Me

mb

er

Sn

F Q

s

Q1

Q2

Q3

MI Channel

HSMs

Alliance Gateway

MQ client


MI Channel

Active

Hot Standby

Objective -Automate failover process to eliminate manual interventions and associated downtime-Preserve message sequencing per queue to ensure business logic is preserved.

Objective -Automate failover process to eliminate manual interventions and associated downtime-Preserve message sequencing per queue to ensure business logic is preserved.

Hot Standby MI Channel Component will automatically acquire the MQ queues used for emission and the SnF queues upon failure of the Active host

Hot Standby MI Channel Component will automatically acquire the MQ queues used for emission and the SnF queues upon failure of the Active host

CLS Browse service - User Authentication• Single Sign On enhancing user experience when accessing CLS

Browse service• Support for Personal token certificates

- Offers 2 factor authentication

- Single token sufficient to connect via multiple data centres • Support for HSM certificates

- Multiple certificates per user may be required to connect via multiple data centres

- Identity federation to link different credentials to same identity

- HSM usability evolution looking at simplifying operational management

• Strong assurance on personal identity

- Individual users require personal certificates, sharing is not supported

Virtual SWIFTNet user can be used when the certificate is linked to a single virtual user (provides operational benefits without removing certificate accountability)



Agenda


• SWIFT time line



New CLS connectivity solution – When to call SWIFT?

• Clearer demarcation between CLS support and SWIFT support

• New CLS connectivity over Store-and-Forward messaging

• SWIFT operations will be a lot simpler

Call SWIFT support for any issues related to connectivity!


Q&A



Thank you

CLS Gateway Elimination project SWIFT Operations Forum - EMEA Damien Vanderveken 27-29 November 2013...

Documents

Transcript of CLS Gateway Elimination project SWIFT Operations Forum - EMEA Damien Vanderveken 27-29 November 2013...