This guide helps you if your SFTP software/client suddenly displays a request to accept a new fingerprint (digital fingerprint) when using the Swiss Backup Infomaniak service.

SFTP software/client alert

If your SFTP software suddenly displays a message asking you to accept a new fingerprint (digital fingerprint), this does not necessarily indicate a security issue. This request may occur following planned technical changes to Infomaniak's infrastructure (if you have received an email about this).

Indeed, as part of the evolution of its services, Infomaniak has recently changed the SFTP gateway used to access hosted files. These changes involve the deployment of new SSH keys on the server side. However, for security reasons, SFTP software/clients systematically compare the server key with the one they have in memory.

If a difference is detected, even if legitimate, they alert you to request confirmation. Therefore, it is normal for an alert to appear and for you to be asked to approve a new fingerprint.

Check if necessary

You can check the official new fingerprints of Infomaniak's SSH keys below. If they match what is displayed in your software, you can accept them with confidence:

4096 SHA256:p4QkBc70lkIpDZpjJAZ4VbPEIaOv54lWxd/DRCMfwgg sftp.swiss-backup.infomaniak.com (RSA)
4096 MD5:a3:6b:fa:7c:0e:22:da:42:ca:82:c7:cc:7e:1f:0a:4a sftp.swiss-backup.infomaniak.com (RSA)

4096 SHA256:gMiEH8oVwWhq8ByQWQP8xMEVy3URi2omZNSMCc0n8z0 sftp.swiss-backup02.infomaniak.com (RSA)
4096 MD5:d2:1a:11:9a:06:4c:55:98:df:38:cd:70:be:08:dd:ca sftp.swiss-backup02.infomaniak.com (RSA)

4096 SHA256:EcQDR+VNUCbK1Zz/eDoa295c0+7JGQD7EP6n+ro5G0U sftp.swiss-backup03.infomaniak.com (RSA)
4096 MD5:bf:5e:92:f7:ed:81:de:84:9e:43:48:f3:1a:9c:3e:8d sftp.swiss-backup03.infomaniak.com (RSA)

4096 SHA256:xRU5RakUZ/yJYg3CDi9JiSRymodbPgM4S3FXvVHqK2s sftp.swiss-backup04.infomaniak.com (RSA)
4096 MD5:16:ce:56:02:c3:ab:80:7b:31:99:a6:cd:a8:00:0e:79 sftp.swiss-backup04.infomaniak.com (RSA)

This change has no impact on the security of your data. If you use scripts or automated software for your transfers or backups, make sure they take this new fingerprint into account.