^{† Denotes update to the article}

CME Group is committed to information security. To deliver the best security and customer experience, we are eliminating support of the RC4-based cipher suites for CME Group web-based applications, APIs, and service in Certification, New Release, and Production environments.

As of this change, customers relying on RC4 cipher suites will no longer have access to these web-based applications, APIs, and services.

Please note: CME Group strongly encourages customers to verify connections so those environments continue to function properly.

RC4 cipher suites support will be removed as follows:

• † Production: Saturday, June 6, 2015 at 6:00 a.m. (CT)

Customers following CME Group Web Browser Standards should not be impacted by this change. However, if customers connect through a proxy, they should ensure their proxy utilizes one or more of these CME Group supported ciphers:

• TLS_RSA_WITH_AES_256_CBC_SHA256
• TLS_RSA_WITH_AES_256_CBC_SHA
• TLS_RSA_WITH_AES_128_CBC_SHA256
• TLS_RSA_WITH_AES_128_CBC_SHA

The change in Certification and New Release environments is complete.

To avoid losing access to CME Cleared Trades API (CT API) please migrate to SMART Click by Friday, June 19. The migration to SMART Click allows users to self-manage their CME Cleared Trades API ID(s).

To ensure a seamless migration to the new API IDs and passwords, CME Group is providing a parallel period, available as detailed below:

• New Release: Available
• Production: Available
• Certification: Available
• Decommissioning of Legacy API IDs and password: Friday, June 19

Customers must complete the following steps to migrate to SMART Click. These steps must be completed sequentially whilst the user is logged out of CT API and must be completed prior to logging in.

1. Log into the SMART Click application with an existing or new SMART Click ID.
2. In the SMART Click API Management screen, create one new API ID and password for each current (legacy) CME Cleared Trades API username in each environment. Once created, the new API ID is owned by the SMART Click user.
3. After the API ID and password are created, contact Enterprise Application & System Entitlements (EASE) to have entitlements applied to the new API ID and password.
4. Log into CT API with the new API ID and password.

Customers are strongly encouraged to migrate their New Release access to SMART Click as soon as possible.

With this change:

• API ID password changes will only be supported via SMART Click’s API ID Management functionality by the SMART Click user who owns the API ID.
  • Customer can continue to maintain and use their legacy user ID & passwords in CT API throughout the migration period or until the Clearing Firm requests that EASE disable it.
• Ownership of an API ID may be transferred from the API ID creator to another SMART Click user at the same firm using the SMART Click Claim functionality.
  • New owner must know the API ID and password to effect the change
• CME Cleared Trades API passwords managed through SMART Click will not expire.
  • Currently, passwords expire every 90 days
  • The existing change password functionality will no longer be supported once the SMART Click migration has occurred.
• Following the SMART Click migration deadline, CT API requests that do not have an API ID linked to a SMART Click ID will be rejected.

Please contact Enterprise Application & System Entitlements (EASE) with questions or concerns pertaining to obtaining API IDs for CME Cleared Trades in the U.S. at +1 312 456 1560, Europe at +44 203 379 3802 or Asia at +65 6593 5536.

CME Clearing House processing will be paused from 18:55 - 19:05 Central time (CT) on Tuesday, June 30, for the leap second, including CME Cleared Trades API. CME Group strongly recommends customers finish their processing prior to 18:55 CT and do not access any CME Clearing House systems during this window.

CME Group uses Network Time Protocol (NTP) to synchronize time and maintain time accuracy. On Tuesday, June 30 (trade date Wednesday, July 1), a positive leap second will be added after 18:59:59 CT. A leap second is a one-second adjustment that is added to Coordinated Universal Time (UTC) to account for variability of the earth’s rotation.

Trades submitted via CME Cleared Trades API during the Leap Second window will be queued. Once the window is complete, all trades will be processed in the order received. Customers will not receive acknowledgements or trade reports until after the window.

Please contact the Global Command Center (GCC) in the U.S. +1 800 438 8616, in Europe at +44 800 898 013 or in Asia at +65 6532 5010.

Additional information is available at cmegroup.com/leapsecond

As previously announced, CME Cleared Trades API (CT API) will be decommissioned Friday, July 31. CT API customers must complete the migration to CME STP by this date.

Refer to the list of certified CME STP vendors should you need to license a new application or determine if your existing vendor is certified for CME STP.

CME STP allows customers to connect to the Exchange for retrieval of FIXML 5.0 SP2 messages containing NYMEX, COMEX, DME, CBOT, CME Clearing Europe and CME Cleared Trades information, and offers several additional advantages:

• Trade confirmations direct from the exchange, including brokered CME ClearPort trades.
• Streamlined post-trade flows.
• Elimination of front-office dual-keying errors through front-line error-checking tools.
• Reduced dependency on end-of-day trade reconciliation and T+1 error correction with Clearing Members and Brokers.
• Ensures real-time regulatory compliance.

Trades on all CME Group exchanges and venues are supported, including CME Globex, CME ClearPort and trading floors.

Development information for CME STP is available in the Client Systems Wiki. Customer certification is required.

Contact the CME STP team at +1 212 299 2361 in the US, +44 20 3379 3797 in Europe and +65 6593 5582 in Asia to get started.