{"id":7059,"date":"2025-08-28T22:35:55","date_gmt":"2025-08-29T03:35:55","guid":{"rendered":"https:\/\/librarytestdev.wpenginepowered.com\/?post_type=doc&p=7059"},"modified":"2026-07-07T13:42:45","modified_gmt":"2026-07-07T18:42:45","slug":"managing-fix-sessions","status":"publish","type":"doc","link":"https:\/\/library-staging.tradingtechnologies.com\/tt-fix\/tt-fix-general\/getting-started-tt-fix-general\/managing-fix-sessions\/","title":{"rendered":"Managing FIX Sessions"},"content":{"rendered":"\n

Managing FIX Sessions<\/h2>\n
\n

Encrypted FIX connections to TT services<\/h3>\n

TT supports SSL-wrapped TCP connections for FIX connections. TT encrypted FIX utilizes server-side certificates only, similar to how most Secure HTTP (https) websites are implemented. Client certificates are not utilized or checked; client authentication occurs at the FIX protocol level utilizing SenderCompID in FIX tag 49 and password in FIX tag 96.<\/p>\n

If your FIX engine natively supports SSL encryption, please consult the documentation for your FIX engine for configuration details. TT provides the TTFIX.crt<\/b> file with the public certificates used by the TT\u00ae<\/sup> Platform FIX endpoint for customers\u2019 use to minimize the risk of a Man-in-the-Middle attack.<\/p>\n

If your FIX engine does not natively support SSL encryption, TT recommends using the open source stunnel proxy to implement the SSL encryption wrapper. Stunnel is available from https:\/\/www.stunnel.org\/<\/a> and supports multiple operating systems, including Linux and Windows. Stunnel encrypts only the individual FIX connection, rather than implementing a full VPN tunnel as was traditionally used to encrypt FIX.<\/p>\n <\/div>\n

\n

Creating FIX sessions<\/h3>\n

Before connecting your FIX client to TT FIX, the company administrator must create the FIX sessions that your FIX client will use. To create a FIX session:<\/p>\n

    \n
  1. Log in to User Setup as a Company Administrator.<\/li>\n
  2. From the Users<\/b> drop down, select FIX Sessions<\/b>.<\/li>\n
  3. Choose + FIX Session<\/b> and fill out the necessary fields. Use the Accounts tab to assign an account to a FIX Drop Copy session or use the Users tab to assign a user to an FIX Order Routing or FIX Inbound Drop Copy session.<\/li>\n <\/ol>\n

    For more information, see Adding and Configuring a FIX Session<\/a>.<\/p>\n <\/div>\n

    \n

    Connecting to TT FIX<\/h3>\n

    FIX clients can connect to TT FIX over a Secure TCP (SSL) connection using the following information. FIX clients can connect to the TT UAT environment via the Internet or stunnel; for the TT Production environment, clients can use stunnel.<\/p>\n \n \n \n \n \n \n \n \n \n \n \n
    <\/th>\n UAT<\/th>\n Production<\/th>\n <\/tr>\n <\/thead>\n
    FIX Drop Copy<\/td>\n fixdropcopy-ext-uat-cert.trade.tt: 11501 \/ 11701<\/td>\n fixdropcopy-ext-prod-live.trade.tt: 11701<\/td>\n <\/tr>\n
    FIX Inbound Drop Copy<\/td>\n fixdropcopy-ext-uat-cert.trade.tt: 11506 \/ 11706<\/td>\n fixdropcopy-ext-prod-live.trade.tt: 11706<\/td>\n <\/tr>\n
    FIX Order Routing<\/td>\n fixorderrouting-ext-uat-cert.trade.tt: 11502 \/ 11702<\/td>\n fixorderrouting-ext-prod-live.trade.tt: 11702<\/td>\n <\/tr>\n
    FIX Market Data<\/td>\n fixmarketdata-ext-uat-cert.trade.tt: 11503 \/ 11703<\/td>\n fixmarketdata-ext-prod-live.trade.tt: 11703<\/td>\n <\/tr>\n
    FIX Recovery (Drop Copy)<\/td>\n fixrecovery-ext-uat-cert.trade.tt: 11505 \/ 11705<\/td>\n fixrecovery-ext-prod-live.trade.tt: 11705<\/td>\n <\/tr>\n
    FIX Recovery (Order Routing)<\/td>\n fixrecovery-ext-uat-cert.trade.tt: 11508 \/ 11708<\/td>\n fixrecovery-ext-prod-live.trade.tt: 11708<\/td>\n <\/tr>\n