Key Security

Sensitive data such as account information and encrypted strings in strategy parameters configured on the FMZ Quant Trading Platform are encrypted on the browser side. All information stored on the FMZ Quant Trading Platform is encrypted (not plaintext data). Only the user's private devices can decrypt and use it, greatly improving the security of sensitive data. If other sensitive information is included in strategy code, parameter settings, strategy descriptions, etc., please do not disclose or sell the strategy.

• The platform supports local configuration of exchange account information, keys and other sensitive information
  On the platform's exchange configuration page, all masked encrypted text box controls support loading local files from the docker's location via file path. Below is a detailed example using the exchange's RSA KEY authentication method to explain how to configure sensitive information locally on the device where the docker program is located.

  1. Create RSA public and private keys. For example, create public and private keys in PKCS#8 format. There are many tools available for creation, such as: openssl.
  2. Create an RSA KEY on the exchange, uploading the public key created in step 1.
  3. Save the private key created in step 1 as a txt file in the docker directory ../logs/storage/xxx, where xxx is the live trading Id; it can also be saved in other paths within the docker program's directory.
  4. When configuring the exchange on the FMZ Quant Platform, fill in the RSA KEY created on the exchange in the Access Key edit box.
  5. When configuring the exchange on the FMZ Quant Platform, fill in the path of the txt file placed in the docker directory from step 3 in the Secret Key edit box. For example, if the file name is: rsaKey.txt, then fill in: file:///rsaKey.txt. When running live trading and referencing this exchange (object), the docker will automatically load the file content from the directory ../logs/storage/xxx/rsaKey.txt as the exchange object's configuration information, such as the RSA private key in this example.

  This way, storing the private key locally is more secure. For detailed process, please refer to the video tutorial

• Changing the FMZ Quant Trading Platform account password will invalidate exchange configurations
  If you change the FMZ Quant Trading Platform account password, all exchange configurations will become invalid and need to be handled according to the following steps:

  1. Reconfigure exchange account related keys, passwords and other information on the "Exchange" management page.
  2. Stop all dockers, and redeploy and run the dockers using the modified FMZ Quant Trading Platform account password.