=============================================================================
Run Date: NOV 16, 2021                     Designation: RMPF*3*7
Package : RMPF - REMOTE ORDER/ENTRY SYSTEM    Priority: Mandatory
Version : 3         SEQ #6                      Status: Released
                  Compliance Date: DEC 17, 2021
=============================================================================


Subject: REMOTE ORDER ENTRY SYSTEM (ROES) 2FA IMPLEMENTATION

Category: 
  - Other
  - Informational

Description:
============

 This patch will update the ROES launch application to use Two Factor 
 Authentication (2FA) which will require the use of a Personal Identity 
 Verification (PIV) card.
  
 In order to make the transition to 2FA, it was necessary to upgrade the 
 ROES launch application to Delphi version XE8 to implement the new Remote 
 Procedure Call (RPC) Broker allowing compliance.
  
 RMPF*3*7 does not update any VistA routines but does update the 
 application used to launch ROES.
  
 New Service Requests (NSRs):
 ----------------------------  
 N/A
  
  
 Patient Safety Issues (PSIs):
 -----------------------------
 N/A
  
  
 Overview:
 --------------------------------------------
  
 Problem:
 -------
 The Department of Veterans Affairs Cybersecurity Task Force has been 
 tasked by the Chief Information Officer (CIO) and the Inspector General 
 (IG) to address identified material weaknesses.  This task force has 
 mandated that all internal, user facing VA applications become two factor 
 authentication (2FA) compliant.  
  
 In order to be complaint, applications are required to authenticate users 
 via Personal Identity Verification (PIV) cards.  
  
 Note: Usernames and password will no longer be permitted for employees 
 and contractors to access VA applications.  
  
 Resolution:
 ----------
 The ROES3 CPRS and Desktop GUI has been upgraded to Delphi XE8 to allow 
 access to the latest version of the RPC Broker, implementing 2FA.  
  
 Test Sites:
 ----------
 Murfreesboro VA Medical Center, Murfreesboro, TN
 St. Louis VA Medical Center, St. Louis, MO
  
 Software and Documentation Retrieval Instructions:
 RMPF*3*7 is being distributed through the National Patch Module (NPM) as 
 an informational patch.
  
 The GUI client software for this patch may be retrieved
 directly from /srv/vista/patches/SOFTWARE/RMPF3_0P7.ZIP or through
 https://download.vista.domain.ext/index.html/SOFTWARE.
  
 Host File Name                           FTP Mode 
 --------------------------------------------------------------------- 
 RMPF3_0P7.ZIP                             BINARY
  
 ZIP file contents                     Description
  -----------------                     -----------
 ROES3.exe                                         Application executable
  
 ROES3DeskTop.exe                                  Application executable
  
 Patch Installation:
  
 Pre-Installation Instructions:
 ------------------------------
  
 Only ROES users need to be off the system while ROES*3.0*7 is being 
 installed.  This patch should be installed during non-peak hours to 
 minimize disruption.  The total installation may take 15 minutes or more, 
 depending on the CPRS Tools menu structure and number of ROES and ROES 
 Desktop executables to update at your site.  
  
 There are no menu options to disable.  
  
 Installation Instructions:
 --------------------------
 1.      Make a backup copy of the current ROES3.exe and ROES3Desktop.exe 
 files (from a location where they currently are being used) to a backup 
 location.  Note the locations where all instances of those executables 
 exist, for future maintenance.  
 2.      Retrieve the file RMPF3_OP7.zip and extract files ROES3.exe and 
 ROES3Desktop.exe 
 3. Follow local procedures for installing the executables and update
 the CPRS Tools menu as needed.  
  
 Post-Installation Instructions:
 -------------------------------
 Since this is an informational patch this will need to be marked complete 
 in VistA, utilizing the:
                 PATCH MONITOR MAIN MENU
                 Patch Processing
                 Mark a Non-Kids Patch as Complete
  
 Back-Out Plan:
 --------------------
 Replace the installed .exe files with the previous version.  
  
 Routine Information:
 ====================
 No routines included.

Routine Information:
====================
No routines included.

=============================================================================
User Information:
Entered By  :                               Date Entered  : MAY 07, 2021
Completed By:                               Date Completed: NOV 15, 2021
Released By :                               Date Released : NOV 16, 2021
=============================================================================


Packman Mail Message:
=====================

No routines included