Generate RSA Key Pair on Windows
Those instructions apply to users who are receiving their statements via sFTP. If you elected to receive your statements in that way, you would first need to generate an RSA Key pair. Here is how to do that:
1. Download WinSCP and PuTTYgen.
2. Run the installer and make sure to check PuTTYgen (key generator) as one of the components to install.
3. Start WinSCP and PuTTYgen.
4. On Puttygen, click Generate. Enter your sFTP username in the Key Comment field, select RSA as Type of key to generate, 2048 as Number of bits in generated key and click on the button Generate.
2. Run the installer and make sure to check PuTTYgen (key generator) as one of the components to install.
3. Start WinSCP and PuTTYgen.
4. On Puttygen, click Generate. Enter your sFTP username in the Key Comment field, select RSA as Type of key to generate, 2048 as Number of bits in generated key and click on the button Generate.
5. Click on "Save private key" and give the file a name (like private). Leave the extension as .ppk ('ale.ppk', in the picture below is an example filename):
6. Open WinSCP, create a new connection and:
- Select SFTP as File protocol.
- Enter xfer.interactivebrokers.com in the Host name field.
- Enter 32 in the Port number field.
7. Click on the button Advanced.
8. In the Advanced Site Settings screen, left side menu, expand SSH and select Authentication. Click on the button ... at the end of the field Private Key file and open the private key you previously saved at point 5):
8. In the Advanced Site Settings screen, left side menu, expand SSH and select Authentication. Click on the button ... at the end of the field Private Key file and open the private key you previously saved at point 5):
9. Click on the button Display public key:
10. Click on the button Copy Key.
11. Open Notepad, press CTRL+V to paste the key string (which is one string of characters without spaces) and then save the file with the name public.key in a folder of your preference:
11. Open Notepad, press CTRL+V to paste the key string (which is one string of characters without spaces) and then save the file with the name public.key in a folder of your preference:
12. Send the file you saved at the previous step as an email attachment to Sales Engineering team.
In the same email, please indicate as well all IP Addresses from which you will access our SFTP Server so we can whitelist them. Please include as well your Account number in the email Subject.
14. Once the IB Sales Engineering Team has configured the parameters for your connection on our servers, you will be able to access your SFTP repository by using the connection you have created.
Related articles
KB3842 - Using GPG/RSA encryption keys to guarantee the privacy and security of your Reports
KB3968 - Generate a key pair using GPG for Windows
KB4205 - Generate a key pair using GPG Suite on macOS
KB4108 - Decrypt your Reports using GPG for Windows
KB4210 - Decrypting Reports using your PGP Key pair on macOS
KB4409 - How to set up sFTP for using Certificate Authentication on Windows
KB4410 - How to set up sFTP for using Certificate Authentication on macOS
KB4411 - How to backup your public/private Key pair
KB4323 - How to transfer your public/private key pair from one computer to another
Generate a key pair using GPG Suite on macOS
If you elected to receive your statements in an encrypted form, you would first need to generate a RSA Key pair. Here is how to do that:
1. Download the GPG Suite for macOS
2. Double click on the downloaded installation file
3. Click on Install
4. Click Continue
5. Click on Install
6. Click Install
Note: By default the installation includes an add-on for Apple Mail called GPG Mail. If you don't use Apple Mail and do not need this add-on, you can de-select it during this step
7. Click on Close
8. Launch GPGTools. The Create new key pair dialog box should automatically open. Input your Full Name, your Email and choose a Password. PLEASE NOTE: Keeping a secure copy of this password is essential. Any loss of this password will require the whole process to be repeated again.
9. Expand Advanced options and make sure that:
Key type is set as RSA and RSA
Length is set to 2048
Key expires checkbox is NOT activated
10. Click on the button Create Key
.png)
11. Once the key pair is created it will be listed in your Key ring. Right click on it and select Export...
.png)
12. Choose a location to save the key pair in the Where field and make sure the checkbox Include secret key in exported file is deactivated. Click on Save.
.png)
13. You will receive a prompt indicating that the key pair was created successfully. Click on No, Thanks! to prevent uploading the public key to the PGP servers.
.png)
14. Open Finder and go to the location you selected for saving the public key (at point 12).
15. Send the public key file as email attachment to the Sales Engineering team. Include your account number in the email Subject. If you are creating the key to access our sFTP service, please make sure to include in the email the IP Address/es your connection will originate from so we can whitelist them.
Related articles
KB3842 - Using GPG/RSA encryption keys to guarantee the privacy and security of your Reports
KB3968 - Generate a key pair using GPG for Windows
KB4108 - Decrypt your Reports using GPG for Windows
KB4210 - Decrypting Reports using your PGP Key pair on macOS
KB4407 - Generate RSA Key Pair on Windows
KB4409 - How to set up sFTP for using Certificate Authentication on Windows
KB4410 - How to set up sFTP for using Certificate Authentication on macOS
KB4411 - How to backup your public/private Key pair
KB4323 - How to transfer your public/private key pair from one computer to another
What timeframe of activity statements is made available online and how can archived statements be obtained?
Overview:
Daily activity statements for the past 4 years are available online through Client Portal. Monthly activity statements for the past 60 months and annual statements for the past 5 years are also available. Statements are available for an additional 2 years beyond this and are available in electronic format only (delivered via email) at the following cost:
- Statements 6 to 7 years old the cost will be USD 25.00 for the first statement + USD 5.00 for each additional statement
Note: IBKR does not typically provide daily statements in lieu of monthly or annual statements.
Payment may be made in the form of check, or in the case of active accounts a debit to the account cash balance. Requests for archived statements may be made via web ticket and checks are to be mailed to Interactive Brokers, Attn: Funds & Banking, 209 S La Salle St. Suite 1000, Chicago, IL 60604 USA
Background:
IMPORTANT NOTE
Cashier’s Checks, Official Checks, Teller’s Checks and Banker’s checks issued by banks are the recommended forms of payment. Personal checks and checks issued by a credit union or bill payment service are subject to a seven business day hold period, after which the requested statements will be issued.
