This is where we report on current milestones in the development of the EBICS standard and further technical topics in the context of EBICS.

The Annex "Transport Layer Security" was expanded to include Key Management Security.
The Annex has been renamed to "Transport Layer Security and Key mangement Security" (TLS and KMS). 
It can be found in the usual place at EBICS-Specification - changes from the previous version can also be downloaded there.

There have been changes in the EBA CLEARING's mapping for RT1 and STEP2 - a link to the updated list can be found under BTF-Mapping ...

The EBICS security concept requires that EBICS customer and bank keys are stored securely and operated securely. When authorizing EBICS orders (via electronic signatures), appropriately certified keys or at least appropriately secured cryptographic key stores must be used. This can be achieved with eIDAS certificates (level advanced or higher) or equivalently certified keys. Alternatively, also FIPS 140-3 (level 1 or higher) or equivalently protected cryptographic key stores can be used.

The EBICS SC will add this clarification at short notice to the EBICS specification, via an update of the EBICS Security Annex „Transport Layer Security & Key Management Security“. This will be a recommendation for all existing EBICS versions (i.e., V 2.x and V 3.0) that is planned to become mandatory with EBICS V 4.0 currently under development. Vendors of EBICS client and server systems not yet aligned with this clarification are encouraged to take care of this at an early stage.

All stakeholders are invited to participate in the public consultation by March 20, 2026, at the latest. If necessary, please contact us with a detailed description at info [at] ebics [dot] de by then.

There have been changes in the EBA CLEARING's mapping for RT1 and STEP2 - a link to the updated list can be found under BTF-Mapping ...

There have been changes in the EBA CLEARING's mapping for RT1 and STEP2 - a link to the updated list can be found under BTF-Mapping ...