Upcoming SFTP Enhancements for Integration Delivery and Retrieval

Posted Sep 6, 2024 7:08 AM PDT Updated Sep 20, 2024 11:09 AM PDT Retirement date: Sep 6, 2025

Open

Alert typeInformation
Release2024R1
Using WorkdayAdministration & Integrations, Authentication & Security
ProductPlatform and Product Extensions
JIRAIR-2868
Affected Data CentersAll Data Centers
Resolution InformationNext Update Mon, 09/30/2024 – 08:00 America/Los Angeles (GMT-0700)

UPDATE Friday September 20, 2024 / 12:00 pm America/Los Angeles -07:00 GMT

Quick update: We are still on track to enable in Production tenants on September 28th, 2024.  Please ensure that you have coordinated with your SFTP server provider to verify that the new algorithms are supported and configured on your server.  


ORIGINAL ALERT MESSAGE: 

As part of Workday’s commitment to maintaining security best practices, we are upgrading the SFTP client used for Integration Delivery and Retrieval. This enhancement aims to offer stronger security and better interoperability for our customers by incorporating the following changes:

 1. Support for RFC-8308 to negotiate Public Key Algorithms, listed in the following order:

  • ssh-rsa
  • rsa-sha2-256
  • rsa-sha2-512

Note: To leverage this feature, your SFTP server must also support and comply with RFC-8308.

2. Addition of a new Server Host Key Algorithm:

  • ssh-ed25519

What Action is Required:
To ensure you benefit from these enhancements, please coordinate with your SFTP server provider to verify that the new algorithms are supported and configured on your server.
Workday will continue to support the existing list of ciphers as detailed on the Workday Community platform.
These features are already available in Non-Production tenants and are expected to be enabled in Production tenants with service update September 28th 2024.

URL: https://community.workday.com/alerts/customer/1205927?check_logged_in=1