EDI – Communication
Swedish Customs currently provides the possibility to submit data electronically with OFTP2 over TLS. The Internet is used to submit data via OFTP2. Your system must comply with RFC5024, which describes the protocol for OFTP version 2. Normally, the data submitter initiates the communication but the encrypted connection (TLS) is based on the Swedish Customs public certificate.
Change or update relating to the OFTP communication system
There are two options related to changing or updating the OFTP communication system. Both require an application to amend your EDI registration. Option 1 is recommended if you have an existing EDI registration.
Option 1
Apply for changes to existing technical appendix (EDI registration - including XML partner and OFTP communication partner). State on the application form: "changing/updating communication party".
This option means:
- Keep the same sender identification and reverse routing address used in the XML-envelope.
- New OFTP code
- If a new OFTP code is added it can exist in parallel with the current production OFTP-code. Transfers with test indicator set to “0” or not present will be routed to production environment. The new communication OFTP can be verified with transfers including test indicator set to “1” that will be routed to the test environment and answers sent to the new OFTP.
- Communication tests will be needed before the transition of production traffic occurs. Contact Customs' IT department
- Message flow must be stopped during the transition of production traffic
- Transition must be completed within 3 months of the application
Option 2
Apply for a new technical appendix. State on the application form: "new communication party".
This option means:
- New reverse routing address
- New OFTP code
- Normal routines for testing a new technical appendix will be followed
- Transition to the new solution for production traffic is made at an optional time after approved tests. If the company has subscription messages you must inform Customs beforehand about a specific date for transferring these to the new technical appendix
When the old technical appendix is no longer in use the company should notify Customs of its removal.
How to apply for amendment of TVEDI
Enhanced communication security
Only TLS 1.2 (It’s an advantage if the OFTP software is supporting TLS 1.3 for future use) can be used for OFTPv2 connections to tmf01.tullverket.se:6619.
Only the following four Cipher Suites will be allowed:
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (Phased out during 2026)
- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (Phased out during 2026)
If you are using TLS 1.2 with any of the following Cipher Suites:
- TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
you should change to
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 or
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
as soon as possible.
The algorithms above are already used when connecting to Swedish Customs from the majority of the companies EDI systems.
You can make the change without informing Swedish Customs.
Please contact your system vendor if you have any questions regarding your communication software.
Server certificate for Swedish Customs’ OFTPv2 server
The server certificate, used to identify Swedish Customs’ OFTPv2 server, is replaced annually. The replacement is normally done during August.
More information about the replacement can be found on:
