Generate RSA key pair for Windows

These instructions apply to users who are receiving their statements via sFTP. If you elected to receive your statements via sFTP, you would first need to generate an RSA Key pair.

RSA Key Generation

To generate an RSA Key pair:

  1. Download WinSCP.
  2. Run the installer and make sure to check PuTTYgen (key generator) as one of the components to install.
  3. Start WinSCP and from the button Tools select Run PuTTYgen.
  4. Once the tool PuTTYgen has opened, according to your preference, select one of these supported Key types and curves. Once done, click the button Generate.
    Type of Key Curve Number of bits
    RSA 2048
    ECDSA nistp256 / nistp384 / nistp521
    EDDSA ed25519 255
    Note: all the above key types are supported by our system. You can choose the one of your preference.
  5. Click "Save private ke**y**" and name the file (e.g: private_key). Leave the extension as .ppk

Do not save your public key yet. Save only your private one.

  1. Open WinSCP, create a new connection and:
    • Select sFTP as File protocol.
    • Enter ftp2.interactivebrokers.com in the Host name field.
    • Enter 22 in the Port number field
  2. .Click on the button Advanced.
  3. In the Advanced Site Settings screen, left side menu, expand SSH and select Authentication. Click on the button ... at the end of the field Private Key file and open the private key you previously saved at point 5):
  4. Click on the button Display public key:
  5. Click on the button Copy Key.
  6. Open Notepad, press CTRL+V to paste the key string (which is one string of characters without spaces) and then save the file with the name public.key in a folder of your preference:
  7. Send the file you saved at the previous step to us via Client Portal → Message Center ticket or to this email: filedelivery@interactivebrokers.com
  8. In the WinSCP Window, click on "OK" in the information pop-up showing the key, then "OK" in the Advanced Site Settings screen, then click on Save to save the new connection you have created.
  9. Once the File Delivery Team has configured the parameters for your connection on our servers, you will be able to access your sFTP repository by using the connection you have created.

Additional Information

Powered by IBot
How to set up sFTP for using certificate authentication on Windows
How to set up sFTP for using certificate authentication on macOS
How to set up sFTP for using certificate auhtentication on Linux
Generate a RSA key pair on macOS