$TXT Created by at MNTVBB.DOMAIN.EXT (KIDS) on Monday, 01/23/23 at 13:06 ============================================================================= Run Date: FEB 21, 2023 Designation: PSS*1*258 Package : PSS - PHARMACY DATA MANAGEMENT Priority: Mandatory Version : 1 SEQ #224 Status: Released Compliance Date: MAR 23, 2023 ============================================================================= Subject: WEB SERVER FILE UPDATE FOR PPSN Category: - Routine Description: ============ This patch addresses one issue: The SSL configuration for web server PPSN (also called "PPS-N") and server address need to be updated. Patch Components: ----------------- Files & Fields Associated: File Name (Number) Field Name (Number) New/Modified/Deleted ------------------ ------------------- -------------------- N/A Forms Associated: Form Name File Number New/Modified/Deleted --------- ----------- -------------------- N/A Mail Groups Associated: Mail Group Name New/Modified/Deleted --------------- -------------------- N/A Options Associated: Option Name Type New/Modified/Deleted ----------- ---- -------------------- N/A Protocols Associated: Protocol Name New/Modified/Deleted ------------- -------------------- N/A Security Keys Associated: Security Key Name ----------------- N/A Templates Associated: Template Name Type File Name (Number) New/Modified/Deleted ------------- ---- ------------------ -------------------- N/A Remote Procedures Associated: Remote Procedure Name New/Modified/Deleted --------------------- -------------------- N/A Parameter Definitions Associated: Parameter Name New/Modified/Deleted -------------- -------------------- N/A Additional Information: ----------------------- N/A Blood Bank Team Coordination: N/A New Service Requests (NSRs): N/A Patient Safety Issues (PSIs): N/A Defect Tracking System Ticket(s) & Overview: -------------------------------------------- INC25745474: PPSN Web Server Updates Problem: -------- The SSL configuration for web server PPSN needs to be updated to "encrypt_only_tlsv12" which is a more secure protocol. The server address also needs to be updated depending on the site/environment type (production, pre-production, development, SQA, or staging). Resolution: ----------- For the web server entry "PPSN", post-install routine PSSP258 updates the SSL CONFIGURATION (#3.02) field in the WEB SERVER (#18.12) file to "encrypt_only_tlsv12". The SERVER (#.04) field in the WEB SERVER (#18.12) file is updated depending on the site type. If the environment is not a production environment, a patch install question is asked of the installer as to the site type. The site type choices will be Pre-Prod, SQA, Staging and Development for non-Production environments. The post-install routine then updates the field accordingly. The various settings cannot be included in this patch description because of privacy regulations regarding IP addresses. After the post-install routine completes, a MailMan message is sent to the installer as well as holders of the security key "PSNMGR". The message displays the former field settings and the changed field settings. Test Sites: ----------- Fayetteville VAMC (Fayetteville, AR) New Jersey HCS (East Orange, NJ) Software and Documentation Retrieval Instructions: -------------------------------------------------- The software for this patch is being released in a PackMan message. Patch Installation: ------------------- Pre-Installation Instructions: This patch may be installed with users on the system although it is recommended that it be installed during non-peak hours to minimize potential disruption to users. This patch should take less than 5 minutes to install. Installation Instructions: 1. Choose the PackMan message containing this build. Then select the INSTALL/CHECK MESSAGE PackMan option to load the build. 2. From the Kernel Installation and Distribution System Menu, select the Installation Menu. From this menu, A. Select the Verify Checksums in Transport Global option to confirm the integrity of the routines that are in the transport global. When prompted for the INSTALL NAME enter the patch name. (ex. PSS*1.0*258). NOTE: Using will not bring up a Multi-Package build even if it was loaded immediately before this step. It will only bring up the last patch in the build. B. Select the Backup a Transport Global option to create a backup message. You must use this option and specify what to backup; the entire Build or just Routines. The backup message can be used to restore the routines and components of the build to the pre-patch condition. i. At the Installation option menu, select Backup a Transport Global. ii. At the Select INSTALL NAME prompt, enter your build PSS*1.0*258. iii. When prompted for the following, enter "R" for Routines or "B" for Build. Select one of the following: B Build R Routines Enter response: Build iv. When prompted "Do you wish to secure your build? NO//", press and take the default response of "NO". v. When prompted with, "Send mail to: Last name, First Name", press to take default recipient. Add any additional recipients. vi. When prompted with "Select basket to send to: IN//", press and take the default IN mailbox or select a different mailbox. C. You may also elect to use the following options: i. Print Transport Global - This option will allow you to view the components of the KIDS build. ii. Compare Transport Global to Current System - This option will allow you to view all changes that will be made when this patch is installed. It compares all of the components of this patch, such as routines, DDs, templates, etc. D. Select the Install Package(s) option and choose the patch to install. i. If installing in a "non-production" environment, the following prompt will be asked: "Enter site type into which this patch is being installed:". Respond with the account type you are installing the patch in (1/2/3/4) (1-Pre-Prod, 2-SQA, 3-Staging, 4-Development) ii. If prompted 'Want KIDS to Rebuild Menu Trees Upon Completion of Install? NO//', answer NO. iii. When prompted 'Want KIDS to INHIBIT LOGONs during the install? NO//', answer NO. iiii. When prompted 'Want to DISABLE Scheduled Options, Menu Options, and Protocols? NO//', answer NO. NOTE: If an incorrect site type designation is entered and the patch install allowed to proceed despite the "Are you sure" prompt, the patch cannot be re-installed. Corrections will need to be made using option XOBW WEB SERVER MANAGER. Back-out/Roll Back Plan: ------------------------ Since this patch contains a post-install routine and is not necessary to delete after install, a back-out plan is not necessary. PPSN web server settings are being set with the installation of this patch and in the event those need to be reset, the roll back plan is to manually update the field settings of the PPSN web server if necessary. The MailMan message sent to the installer as well as holders of the security key "PSNMGR" contains information on the previous field settings of the PPSN web server. The global ^XTMP("PSSP258B" contains the same information. Perform the "ES" (Edit Server) action in Web Server Manager [XOBW WEB SERVER MANAGER] option to edit the PPSN web server fields of "SERVER" and "SSL CONFIGURATION" to the pre-install settings. Please call the national help desk or enter a help desk ticket, if required. Validation of Back-out Procedure: --------------------------------- Perform action "EP" (Expand Entry) in Web Server Manager [XOBW WEB SERVER MANAGER] option to view the PPSN configurations. Routine Information: ==================== The second line of each of these routines now looks like: ;;1.0;PHARMACY DATA MANAGEMENT;**[Patch List]**;9/30/97;Build 9 The checksums below are new checksums, and can be checked with CHECK1^XTSUMBLD. Routine Name: PSSP258 Before: n/a After: B21768486 **258** ============================================================================= User Information: Entered By : Date Entered : JAN 12, 2023 Completed By: Date Completed: FEB 21, 2023 Released By : Date Released : FEB 21, 2023 ============================================================================= Packman Mail Message: ===================== $END TXT