$TXT Created by at KRNDEV.FO-OAKLAND.DOMAIN.EXT (KIDS) on Thursday, 11/16/23 at 14:21 ============================================================================= Run Date: JAN 30, 2024 Designation: XU*8*756 Package : XU - KERNEL Priority: Mandatory Version : 8 SEQ #634 Status: Released Compliance Date: MAR 01, 2024 ============================================================================= Associated patches: (v)XU*8*543 <<= must be installed BEFORE `XU*8*756' Subject: VISTA KERNEL SIGN-ON LOG RETENTION PERIOD Category: - Routine - Data Dictionary - Other Description: ============ This patch enables Information Security Officers (ISOs) to specify the number of days to retain sign-on data. Some sites need to retain entries in the Kernel SIGN-ON LOG (#3.081) file for at least one year in order to respond to any Office of Inspector General (OIG) inquiries during a litigation hold. The ISO will be able to submit a request to edit/change the number of days to retain the sign-on log between 365 to 9999 days; the default value is 365 days. Since the parameter determines the number of entries (number of days) to retain data in the sign-on log, larger values will consume more disk space. Sites should evaluate the impact on data storage before changing the default value. Patch Components: ----------------- Files & Fields Associated: File Name (Number) Field Name (Number) New/Modified/Deleted ------------------ ------------------- -------------------- KERNEL SYSTEM PARAMETERS SIGN-ON LOG RETENTION NEW (#8989.3) (221) Forms Associated: Form Name File # New/Modified/Deleted --------- ------ -------------------- XUSITEPARM 8989.3 Modified Mail Groups Associated: Mail Group Name New/Modified/Deleted --------------- -------------------- N/A Options Associated: Option Name Type New/Modified/Deleted ----------- ---- -------------------- N/A Protocols Associated: Protocol Name New/Modified/Deleted ------------- -------------------- N/A Security Keys Associated: Security Key Name ----------------- N/A Templates Associated: Template Name Type File Name (Number) New/Modified/Deleted ------------- ---- ------------------ -------------------- N/A Remote Procedures Associated: Remote Procedure Name New/Modified/Deleted --------------------- -------------------- N/A Parameter Definitions Associated: Parameter Name New/Modified/Deleted -------------- -------------------- N/A Additional Information: N/A New Service Requests (NSRs): ---------------------------- 20160512 - Retain Sign-On Log Data for One Year Patient Safety Issues (PSIs): ----------------------------- N/A Defect Tracking System Ticket(s) & Overview: -------------------------------------------- INC26186222 Problem: ---------- Currently the default value of days to retain Sign-on log is 30 days, and it is hard coded. Information Security Officer (ISO) needs to specify number of days to retain sign-on data. Some sites are in need to retain sign-on log for at list one year to respond to OIG inquiries during a litigation hold. Resolution: ------------- The ISO will be able to request edit/change number of days to retain sign-on log between 365 to 9999 days, default value is 365 days. The enhancements/fixes are: - Adds a new SIGN-ON LOG RETENTION (#221) parameter field in the KERNEL SYSTEM PARAMETERS (#8989.3) file. This parameter determines the number of entries (number of days) to retain data in the sign-on log. Larger values will consume more disk space; so, sites should evaluate the impact on data storage before changing the default value of 365 days. - Adds a new "SIGN-ON LOG RETENTION" field to the Enter/Edit Kernel Site Parameters [XUSITEPARM] option form. This new form field allows the user to set the value of the SIGN-ON LOG RETENTION (#221) parameter field in the KERNEL SYSTEM PARAMETERS (#8989.3) file. - Enhances the SCPURG^XUSPURGE routine. This routine is called by the scheduling option Purge Sign-on Log [XUSCZONK] so that it protects sign-on log entries for at least the number of days specified by the ISO or the default 365 days as defined in the SIGN-ON LOG RETENTION (#221) parameter field in the KERNEL SYSTEM PARAMETERS (#8989.3) file. Test Sites: Change Order #: --------------------------------------- Iron Mountain CHG0440891 Phoenix CHG0440537 Software and Documentation Retrieval Instructions: ---------------------------------------------------- The software for this patch is being released as a PackMan message. Documentation describing the new functionality is included in this release. Documentation can be found on the VA Software Documentation Library at: https://www.domain.ext/vdl/. Documentation can also be obtained at https://download.vista.domain.ext/index.html/SOFTWARE. Documentation Title File Name --------------------------------------------------------------------- Kernel 8.0 & Kernel Toolkit 7.3 Systems Management Guide KRN_8_0_SM.DOCX and KRN_8_0_SM.PDF Technical Manual KRN_8_0_TM.DOCX and KRN_8_0_TM.PDF Patch Installation: ------------------- Pre/Post Installation Overview: ------------------------------- There are no Pre/Post installation routine processes. Pre-Installation Instructions: ------------------------------ This patch may be installed with users on the system although it is recommended that it be installed during non-peak hours to minimize potential disruption to users. This patch should take less than 5 minutes to install. Installation Instructions: -------------------------- 1. Choose the PackMan message containing this build. Then select the INSTALL/CHECK MESSAGE PackMan option to load the build. 2. From the Kernel Installation and Distribution System Menu, select the Installation Menu. From this menu, A. Select the Verify Checksums in Transport Global option to confirm the integrity of the routines that are in the transport global. When prompted for the INSTALL NAME enter XU*8*756 NOTE: Using will not bring up a Multi-Package build even if it was loaded immediately before this step. It will only bring up the last patch in the build. B. Select the Backup a Transport Global option to create a backup message. You must use this option and specify what to backup; the entire Build or just Routines. The backup message can be used to restore the routines and components of the build to the pre-patch condition. i. At the Installation option menu, select Backup a Transport Global ii. At the Select INSTALL NAME prompt, enter your build XU*8*756 iii. When prompted for the following, enter "R" for Routines or "B" for Build. Select one of the following: B Build R Routines Enter response: Build iv. When prompted "Do you wish to secure your build? NO//", press and take the default response of "NO". v. When prompted with, "Send mail to: Last name, First Name", press to take default recipient. Add any additional recipients. vi. When prompted with "Select basket to send to: IN//", press and take the default IN mailbox or select a different mailbox. C. You may also elect to use the following options: i. Print Transport Global - This option will allow you to view the components of the KIDS build. ii. Compare Transport Global to Current System - This option will allow you to view all changes that will be made when this patch is installed. It compares all of the components of this patch, such as routines, DDs, templates, etc. D. Select the Install Package(s) option and choose the patch to install. i. When prompted 'Want KIDS to INHIBIT LOGONs during the install? NO//', answer . ii. When prompted 'Want to DISABLE Scheduled Options, Menu Options, and Protocols? NO//', answer Post-Installation Instructions ------------------------------ No further action needed. Back-Out/Roll Back Plan: ------------------------------- Step:1 To rollback/backout this patch, a. Use MailMan menu to locate the PackMan message containing the backup build. The subject of the PackMan message begins with "Backup of XU*8.0*756". Use the PackMan message action XTRACT KIDS. Use the INSTALL/CHECK MESSAGE option to load it. b. Then use KIDS menu to install the backup KIDS distribution using the Install Package(s) [XPD INSTALL BUILD] option. Step:2 Use FileMan to remove the SIGN-ON LOG RETENTION field, as follows: 1 ENTER OR EDIT FILE ENTRIES 2 PRINT FILE ENTRIES 3 SEARCH FILE ENTRIES 4 MODIFY FILE ATTRIBUTES 5 INQUIRE TO FILE ENTRIES 6 UTILITY FUNCTIONS 7 OTHER OPTIONS 8 DATA DICTIONARY UTILITIES 9 TRANSFER ENTRIES Select OPTION: MODIFY FILE ATTRIBUTES Do you want to use the screen-mode version? YES// NO Modify what File: BUILD// 8989.3 KERNEL SYSTEM PARAMETERS (1 entry) Select FIELD: SIGN-ON LOG RETENTION LABEL: SIGN-ON LOG RETENTION Replace @ SURE YOU WANT TO DELETE THE ENTIRE 'SIGN-ON LOG RETENTION' FIELD? Y (Yes) OK TO DELETE 'SIGN-ON LOG RETENTION' FIELDS IN THE EXISTING ENTRIES? Yes// (Yes). If assistance is needed to rollback/backout the patch, please log a SNOW ticket so the development team can assist. Routine Information: ==================== The second line of each of these routines now looks like: ;;8.0;KERNEL;**[Patch List]**;Jul 10, 1995;Build 18 The checksums below are new checksums, and can be checked with CHECK1^XTSUMBLD. Routine Name: XUSPURGE Before: B8394877 After: B9148535 **180,312,543,756** ============================================================================= User Information: Entered By : Date Entered : SEP 02, 2021 Completed By: Date Completed: JAN 30, 2024 Released By : Date Released : JAN 30, 2024 ============================================================================= Packman Mail Message: ===================== $END TXT