[CAFR-Contacts-News] FW: UPDATE - To help identify mainframe users and keep them securely connected after Dec 2018

[HAMILTON Robert W * DAS]

Hello CAFR Contacts,

Because of its importance, we've been asked to forward the announcement below on the CAFR Contacts News.

Rob


UPDATE - upcoming mainframe security requirements deadline extended to May 20, 2019.
SFMS encourages users to work with their agency's IT staff to meet this new TLS requirement and avoid losing your connection to the mainframe.

Please see below for additional details.

From: SFMS-News [mailto:sfms-news-bounces at listsmart.osl.state.or.us] On Behalf Of PARK Alan * DAS
Sent: Wednesday, July 18, 2018 3:26 PM
To: Sfms-News at Listsmart. Osl. State. or. Us (sfms-news at listsmart.osl.state.or.us<mailto:sfms-news at listsmart.osl.state.or.us>) <sfms-news at listsmart.osl.state.or.us<mailto:sfms-news at listsmart.osl.state.or.us>>
Subject: [SFMS-News] To help identify mainframe users and keep them securely connected after Dec 2018

Dear Agency Business Contacts-

You've granted your people security to the mainframe accounting and payroll systems needed for their various roles.

Now, here's a heads-up to help ensure each of their personal computers stay connected to the mainframe.

By the end of December 2018, secure connection protocols must meet a new threshold of Transport Layer Security (TLS) version 1.2.

While State Data Center staff are reaching out to IT staff at the various agencies, it might behoove all involved for agency business staff and IT staff to be on the same page to help identify individuals who need to connect to the mainframe and to determine if each of their machines appear good to go.

There appear to be two basic factors enabling a personal computer's TLS v. 1.2 connection to the mainframe:


1.     Windows version 7 or later (For version 7 Admins must add a TLS v. 1.2 registry key, version 8 and above currently support TLS v. 1.2 by default).

2.     Terminal emulation software must have been updated recently enough (generally during the last few years) so the TLS v. 1.2 connection option is available in the session configurations.

Recent versions of Zephyr Passport, Nexus Terminal, Attachmate Extra, Hummingbird Host Explorer and even the Freebie wc3270 emulation software, connect with TLS v. 1.2 so it looks promising many might already be good to go and for the rest of us, options are available. (Please note: Other than the free wc3270, emulator costs can range from $50-300 per person.)

Thank you in advance for touching base with your IT staff to help ensure users can avoid a disruption in connectivity.

Please let me know if you might have questions or if/how I might be of assistance in any way.

-Michael

Michael Lacy, CPA
Project Coordinator
DAS | Enterprise Goods and Services | Financial Business Systems
503-373-0264 | https://oregon.gov/DAS<https://dasapp.oregon.gov/statephonebook/display.asp?agency=10700&division=00160&section=00013> |Data Class:  Level 2 - Limited

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://omls.oregon.gov/pipermail/cafr-contacts-news/attachments/20181219/0d1bd8df/attachment.html>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ATT00001.txt
URL: <https://omls.oregon.gov/pipermail/cafr-contacts-news/attachments/20181219/0d1bd8df/attachment.txt>