FTP/SFTP/FTPS Server Discontinued on July 31, 2024

The Momentus Enterprise FPT/SFTP/FTPS Server will be discontinued on July 31, 2024. 

Q: What is FTP, and why are Momentus Enterprise customers using it?

A: FTP is a weak/insecure protocol for transporting sensitive information, in this case, over the Internet. SFTP is a secure protocol for securely transferring information. SFTP meets the security standards required by our customers for transporting their sensitive information securely.

The customers impacted have a file-based integration that uses the Momentus FTP/SFTP/FTPS server to exchange data with a third-party system. This can be used, for example, to export invoices or accounts or import payments.

Momentus will no longer offer the FTP server, which means that existing file-based integrations relying on the FTP server will no longer work after the End of Life date.

Q: Why are we making this change?

A: Momentus Technologies has committed to becoming SOC II Type II and ISO 27001 certified this year. This commitment has required Momentus Technologies to review and adjust its security posture to meet this goal. Based on this review, the security team identified that Momentus Technologies was using an insecure protocol (FTP) to transfer customer data. Momentus Technologies realized that this protocol was putting our customers, as well as Momentus Technologies, at risk. Therefore, our CISO, Ken Bell, required us to take immediate action to implement compensating controls and discontinue the use of this service by no later than July 31, 2024. If you have questions or concerns related to this decision, please direct your questions/concerns and/or set up a meeting with Ken to discuss.

Q: When is the End of Life (EOL) for the Momentus FTP server?

A: The EOL date is July 31, 2024

Q: How do I know if I use the Momentus FTP server?

A: Customers who are impacted by this change should receive an email and/or be contacted by their Account Manager or Value Success Manager to discuss the next steps.

Q: I was contacted by Momentus; what do I need to do next?

A: Customers need to find an alternative provider for your file-based integrations to ensure seamless data exchange.

Q: How do I find a new provider?

A: Momentus recommends that customers evaluate file transfer services based on security, reliability, ease of use, and pricing. We recommend that you ask the third-party provider what type of protocols they support. And we recommend that you keep the same protocol you are currently using to simplify the change to the new provider.

Alternative Providers: 

• FTP/SFTP
  • https://sftpcloud.io
  • https://hostedftp.com

Momentus recommends the above providers but assumes no liability for the listed providers and asks you to make your own inquiries.

Q: What details does Momentus need to change the integrations?

A: To update the integrations, Momentus needs customers to provide the following:

• New provider’s name and URL
• Authentication credentials (if any)
• Specific endpoints or paths for file transfers
• Any additional configuration settings required by the new provider.

Please submit a Support Ticket and provide your new credentials.

Q: What if I have questions or concerns regarding the change? 

A: Please contact your Account Manager or Value Success Manager via email. If needed, they will forward queries to the relevant team for validation. Please provide as much detail as possible in their email to enable our team to respond promptly and accurately.

Q: How do I provide the new credentials, and how will the change be implemented?

A: Please provide the new credentials via a Support Center ticket. They will be initially applied to your Test integrations, where they need to be validated and, if needed, a third party. Upon successful confirmation, Momentus will implement the changes to the production integrations, following an agreed-upon timeline.