$TXT Created by at MNTVBB.DOMAIN.EXT (KIDS) on Friday, 10/30/20 at 12:37 ============================================================================= Run Date: DEC 07, 2020 Designation: SD*5.3*750 Package : SD - SCHEDULING Priority: Mandatory Version : 5.3 SEQ #623 Status: Released Compliance Date: JAN 07, 2021 ============================================================================= Subject: UPDATE PCMM WEB HEALTHEVET WEB SERVICE TO USE TLS Category: - Routine Description: ============ This patch will update the Patient Centered Management Module (PCMM Web) server entries in the VistA HealtheVet Web Services Client (HWSC). ************************************************************************** ** The "encrypt_only_tlsv12" SSL/TLS Configuration introduced in patch ** ** XOBW*1.0*6 must be created prior to installing this patch. ** ************************************************************************** Patch Components: ----------------- Files & Fields Associated: N/A Forms Associated: N/A Mail Groups Associated: N/A Options Associated: N/A Protocols Associated: N/A Security Keys Associated: N/A Templates Associated: N/A Remote Procedures Associated: N/A Parameter Definitions Associated: N/A Additional Information: Blood Bank Team Coordination: ---------------------------- N/A New Service Requests (NSRs): ---------------------------- N/A Patient Safety Issues (PSIs): ----------------------------- N/A Defect Tracking System Ticket(s) & Overview: -------------------------------------------- 1. INC14108055 - Update PCMM Web Server entries in HWSC Problem: ------- The PCMM HWSC Web Server entries, in the Web Server (#18.12) file, send data between PCMM Web and VistA unencrypted. Resolution: ---------- Routine SD53P750 will modify the PCMM Web server entries in HWSC by enabling TLSv1.2 encryption. This patch will utilize the "encrypt_only_tlsv12" SSL/TLS configuration introduced in patch XOBW*1.0*6. This patch will also disable the "PCMMR" web server entry in TEST environments and the "PCMMR TEST" web server entry in ALL environments. Test Sites: ---------- Battle Creek VAMC Tuscaloosa VAMC Software and Documentation Retrieval Instructions: ---------------------------------------------------- The software for this patch is being released in a PackMan message. Patch Installation: Pre/Post Installation Overview: ------------------------------- Installation will take less than 2 minutes. It is not necessary to disable any options. You may install this patch at any time without interruption to users. Pre-Installation Instructions: ------------------------------ N/A Installation Instructions: -------------------------- 1. Choose the PackMan message containing this patch and invoke the INSTALL/CHECK MESSAGE PackMan option. 2. From the Kernel Installation & Distribution System menu, select the Installation menu. 3. From this menu, you may select to use the following options: (when prompted for INSTALL NAME, enter SD*5.3*750) a. Verify Checksums in Transport Global - This option will allow you to ensure the integrity of the routines that are in the transport global. b. Print Transport Global - This option will allow you to view the components of the KIDS build. c. Compare Transport Global to Current System - This option will allow you to view all changes that will be made when this patch is installed. It compares all components of this patch (routines, DD's, templates, etc.). d. Backup a Transport Global- This option will create a backup message of any routines exported with this patch. For each patch you can specify what to backup; the entire Build or just Routines. When asked to specify what to backup, select Routines. It is NOT recommended to use this backup to restore the system as it will NOT restore your system to pre-patch condition. When prompted for a response, select Routines B Build R Routines Enter response: Routines A problem has been identified when the patch your attempting to backup contains new routines, the Build selection will throw an error. Until the issue is resolved installers should use the "ROUTINE" method (original process) of backing up a patch. 4. Use the Install Package(s) option and select the package SD*5.3*750. 5. When Prompted "Want KIDS to INHIBIT LOGONs during the install? NO//", respond NO. 6. When Prompted "Want to DISABLE Scheduled Options, Menu Options, and Protocols? NO//", respond No. Post-Installation Instructions: ------------------------------- N/A Back-Out Plan: -------------------- Due to the complexity of this patch, it is not recommended for back-out, and a restore from a backup of the Transport Global should not be attempted. In the event that a site decides to back out this patch, the site should contact the National Service Desk (NSD) to submit a help desk Routine Information: ==================== The second line of each of these routines now looks like: ;;5.3;Scheduling;**[Patch List]**;Aug 13, 1993;Build 1 The checksums below are new checksums, and can be checked with CHECK1^XTSUMBLD. Routine Name: SD53P750 Before: n/a After: B12584019 **750** ============================================================================= User Information: Entered By : Date Entered : APR 23, 2020 Completed By: Date Completed: DEC 07, 2020 Released By : Date Released : DEC 07, 2020 ============================================================================= Packman Mail Message: ===================== $END TXT