SFTP
Security
We use the Secure File Transfer Protocol (also called SSH File Transfer Protocol) to transfer files, which has the following benefits:
- It's in accordance with industry standards.
- SFTP is based on a strong AWS Key Management Policy (using an Advanced Encryption Standard algorithm in Galois/Counter Mode with 256-bit secret keys).
- We isolate your data from other customers' data.
- We use an AWS S3 bucket to store files during import, but once imported to ONESOURCE Indirect Tax Compliance, we delete them from storage.
- Your access to a dedicated SFTP folder is protected by SSH key certificate-based authentication.
Set up an SFTP client
- You'll need an SFTP client such as FileZilla, WS_FTP, WinSCP, and Open SSH to connect to your SFTP location and upload data.
- Share the certificate public key with us to enable your SFTP account via certificate-based SSH authentication.
- Once you've enabled your account, use the corresponding private key to access your SFTP folder in the AWS S3 bucket.noteYou'll have your own root folder. The "Home directory" will be the root folder and its structure is/<s3 bucketname>/<environment>/username. For example,/a204253-oitc-emea1-prod-awstranser/emea1/f09.
- Upload your files.noteYou can upload files up to a maximum of 200 MB. This is flexible according to the data (that is, the number of fields). If you have larger files, break them down before importing.
Upload configurations
- Automatic uploads: If you want to set up automatic uploads of your data, contact our Professional Services team to configure it for you.
- Multiple uploads of the same file: Clear thePrevent further matchescheckbox on theFTP rules screen.
Connection details
Region | URL | IP Address | Port |
|---|---|---|---|
APAC | itc-trsftp-apac1.onesourcetax.com |
| 22 |
EMEA | itc-trsftp-emea1.onesourcetax.com |
| 22 |
SSH Keys
- Key generation: We can't advise on how you should generate keys. Your approach to generating keys needs to be informed by your own IT security compliance and guidelines.
- Key file types:.puband.key.
- Supported key formats:sshonly.
tip
You can use the following command if you need to convert an
ssh2
-formatted file to ssh
.Read receipts
- You'll find read receipts in the SFTPOutboxfolder, within theClientfolder.
- Read receipts for completed imports will be named:({ImportFileName}).{Import ID}.Receipt.txt
- Read receipts contain a set of key value pairs:{key}: {value}.noteThe keys are:
- Import name
- Status: Import Successful or Import Failed.
- Read receipts for failed imports include a list of errors, prefixed withError {number}.
- Read receipts for successful imports include: Total Transactions, Total Input Transactions, Total Output Transactions, Total Net Value (Absolute), Total VAT Value (Absolute).