**INTERDEPARTMENTAL COMMITTEE FOR METEOROLOGICAL SERVICES AND SUPPORTING
RESEARCH (ICMSSR)**

**COMMITTEE FOR ENVIRONMENTAL INFORMATION SYSTEMS**

**AND COMMUNICATIONS (CEISC)**

**Draft Record of Actions for Teleconference 2007-1**

**April 16, 2007 (10:00 a.m. -- 12:00 p.m.)**

**[PARTICIPANTS]{.underline}**

Mr. Fred Branski, NOAA/NWS, Cochair

Mr. Michael R. Howland, USAF/AFWA, Cochair

DOD: CDR David Pashkevich, USN

> Mr. Walter Coley, AFWA/SCM
>
> LCDR Marc Touchton, USN & AFWA

DOT/FAA: Mr. Joseph DeDonatis

> Mr. Dino Rovito

Mr. David Pace

DOC/NOAA: Mr. Bruce Webster (NCEP)

Mr. Seyed Hosseini (NESDIS)

Mr. Jeff Ator (WG/MC Chair)

Mr. Timothy Hopkins (OST)

EPA: Dr. Joseph Retzer

OFCM: Lt Col David Andrus (WG/MC Exec Sec)

Ms. Mary Cairns

> Mr. Ken Barnett

1.  [Welcome and opening remarks]{.underline}. Mr. Howland opened the
    meeting with a few remarks. We are going to have an update of the
    status of the closure of DOD FTP ports to external users. The DOD
    security action schedule has been adjusted some and we now have some
    more concrete details. We will review two requests from the Working
    Group for Meteorological Codes and then have a discussion about the
    need to re-invigorate the Joint Action Group for eXtensible Markup
    Language and Web Services (JAG/XMLWS). The JAG/XMLWS needs to help
    respond to some of the needs in the development of the Next
    Generation Air Transportation System. Mr. Branski welcomed the group
    and agreed with the importance of the agenda items discussed by Mr.
    Howland.

**Action 07-1.1 CEISC web site update.** Ken Barnett will add the
missing ROA for the 2006-02 Teleconference. (Ken Barnett's action, to be
completed by April 2007.)

2.  [Air Force Weather Agency FTP Replacement]{.underline}. Mr. Walter
    Coley's briefing.

-   Joint Task Force (JTF) -- Global Network Operations (GNO)
    Communications Tasking Order (CTO) 06-02

    -   Implement certificate-based client authentication to private DoD
        web servers

-   Private DoD web servers are defined as: Any DoD owned, operated or
    controlled web server containing official information that has not
    been reviewed and approved for public release in accordance with
    DODD 5230.9 and DODDI 5230

-   DoD approved certificates needed to access AFW web-enabled systems

-   All customers will be challenged for a certificate

    -   Can still use Username/password

    -   Username/password will be eliminated after certificate system
        fully enabled (est. Oct 08)

-   DoD CIO stated NOAA is considered a Uniformed Service and can obtain
    soft certificates by contacting Glen Lee (listed below). This is a
    local Washington D.C. provider and NOAA will not have to pay for
    this certificate. This covers web site and file transfer access,
    regardless of who initiates the file transfer.

    -   Glen Lee, WHS\
        E-mail glen.lee.ctr@whs.mil\
        (703-614-0185)

-   Other external customers

    -   Must obtain DoD approved certificate (w/DoD sponsorship) for
        access -- this must be done in person. Ms Cox issues
        certificates for us, but this must be done in person. Either you
        can come here or she can go there.

    -   No waiver process at this time

    -   JAAWIN will continue to accept Username/Password access until
        directed otherwise by DoD

-   FIPS 201 Personal Identity Verification (PIV) of Federal Employees
    and Contractors dated March 2006

    -   Applicable to identification issued by Federal departments and
        agencies to Federal employees and contractors (including
        contractor employees) for logical access to Federally controlled
        information systems except for "national security systems" as
        defined by 44 U.S.C. 3542(b)(2).

-   Utilize the Federal Bridge for cross certification of PKI
    certificates

-   Agencies must be registered with the Federal Bridge before AFWA
    fully PK Enables systems (est. Oct 08).

    -   <http://www.cio.gov/fbca/crosscert_info.htm>

-   The Federal Bridge concept is where all interagency communications
    are supposed to take place. Currently, it is being decided where
    these bridges will reside and it looks like one will reside at
    Offutt AFB.

    -   The test case will take place in the next six months.

    -   Agencies that communicate with one another must register with
        that Federal Bridge, so right not that registration must be done
        by October 2008.

    -   This will not impact our DATMS-U (DISN Asynchronous Transfer
        Mode Services -- Unclassified) communications. We don't expect
        any impacts on DATMS-U until 2009.

-   All DoD agencies using FTP for data transfer to any agency residing
    outside of the .mil domain (.com, .org, .gov, .edu, etc.) must
    transition to secure method of FTP prior to ports 20 and 21 being
    closed

-   JTF-GNO will issue Warning Order giving all agencies 90-120 days to
    make transition prior to port closure

-   Per AF Network Operations Security Center, Warning Order will be
    issued when an approved exception policy is in place for systems
    unable to transition to Secure FTP. Projected implementation date:
    Oct 07.

-   AFCA stated all solutions must be FIPS 140-2 compliant

-   At this time AFWA is evaluating Open-Source (free) SSH for
    implementation on all WPMDS platforms. Open-Source is FIPS 140-2
    certified.

-   AFWA contacted all FTP customers residing outside .mil domain,
    providing notification of need to transition to Secure FTP

-   AFWA may migrate permanently from a push system to a non-.mil
    customer pull system for all graphics and alphanumeric data from a
    dedicated SFTP server.

-   Our METOC database supporting web services and data dissemination
    services will push GRIB data to customers and allow data pulls when
    implemented in June 07.

-   AFWA projects 90 days necessary for Open Source SFTP installation on
    HQ AFWA systems from date of Warn Ord.

-   AFWA final solution is the METOC database supporting web services
    and data dissemination services. Projected SFTP FOC: Late CY08.

-   AFWA will work with all customers/data providers requesting data
    flow testing

-   Non-DoD customers must install compatible software (open source or
    commercially available) to transition to SFTP

-   DATMS-U traffic is not impacted and will continue to use standard
    FTP for the next 12 months. Additional changes will be driven by
    DoD.

-   PKI/E

    -   Ensure your agency is registered with the Federal Bridge

    -   Obtain soft-certificates

-   SFTP

    -   DATMS-U traffic will continue to use standard FTP for the next
        12 months (final resolution driven by DoD guidance)

    -   Non-DATMS-U customers will experience slower data delivery due
        to encryption process

    -   Installation cost \[man-hours (installation and testing) and
        software (if commercial)\]

Open Discussion:

(Webster) Has anyone looked at the costs and slow down of moving large
data files through encryption? (Coley) We have looked at is fifteen
megabyte files, there is no change in the actually transfer time, but
the negotiation time is a couple of seconds. (Branski) NOAA has looked
at this from various customers and there is an impact on actually
processor load. (Howland) Coming down the road, if the need causes the
encryption/decryption process for large metsat products and model sets,
increased robust processors will need significant investment. (Branski)
NOAA is currently moving toward interconnect service agreements with in
a program called NOAAnet. The FIPS has been deemed a high system not
moderate, which means it will need to be encrypted. Encryption is not a
matter of if, it is a matter of when. (Howland) Which is true for
DATMS-U also. This NOAAnet implementation is a large undertaking, will
you have a firm timeline in place this summer? If so, this would be a
great issue for our next CEISC meeting. (Branski) I agree, a NOAAnet
brief would be very helpful.

**Action 07-1.2 DOD/NOAA certificate process turnaround time.** Mr.
Walter Coley will make contact with Glen Lee and provide back to NOAA
CEISC members the average turnaround time for completion of the DOD
granted certificate.

3.  [Navy FTP Policy Update]{.underline}. CDR David Pashkevich's
    briefing.

-   Awaiting JTF-GNO to issue a Warning Order (WARNORD) for closure
    actions to take place (TBD)

    -   A \"Temporary Exception" policy still anticipated to be
        implemented; however, the exception will only be sufficient to
        complete required action to comply with the WARNORD

-   FNMOC is prepared to disable ports 20,21 (FTP)

-   All FTP customers or data providers have not converted to approved
    protocols

    -   Major customers have been notified of the anticipated changes

-   Update since Oct 06:

    -   Modified existing Distributed Processing System (DPS) software
        to use FTP-SSL, http and/or http(s).

    -   Established a web server on Bulk File Transfer hosts for
        customers capable and willing to retrieve data via http(s) pull,
        and converted several customers to this method.

    -   Converted some data retrievals from FTP to http, most
        importantly the NWS GTS pull, which is FNMOC's primary source of
        modeling data.

    -   Converted some customers to CAGIPS (http(s) w/ PKI) and have set
        a target date of 1 Oct 07 for conversion of all unclassified
        gridded data customers to CAGIPS.

-   Concern over NOAA-NESDIS ODAA partners who provide satellite data
    via FTP push.

    -   Need NOAA-NESDIS management committed to use of DoD approved
        protocol(s)

> FNMOC Summary

-   Short term: FTP-SSL, some http(s)

-   Long term: http(s) with PKI

-   Dependency on external customers and data providers service changes

> NAVO FTP Port Closure Plan Update

-   NAVO is prepared to disable ports 20,21 (FTP)

-   All FTP customers or data providers have not converted to approved
    protocols

    -   Major customers have been notified of the anticipated changes

-   Update since Oct 06:

    -   Have addressed IA concerns regarding external FTP data transfers
        with Navy DAA; no resolution to date

-   Issues and concerns:

    -   None identified with respect to Federal partners

**Action 07-1.3 FNMOC and NOAA-NESDIS connection.** CDR Pashkevich will
check for any data transport between FNMOC and NESDIS which is not
traveling over DATMS-U.

4.  [Working Group for Meteorological Codes (WG/MC)]{.underline}. Lt Col
    David Andrus (ES, WG/MC). The group is requesting guidance and
    participation for their next meeting from Mr. Branski, as the lead
    to WMO, about the National Code Migration Plan. (Branski) The WMO
    Congress is meeting May 4^th^-24^th^ and all the issues we have been
    working on should get validated at the Congress. Including the setup
    of a new expert team dealing with XML and the decision about code
    migration. (Barnett) Do you think some overlap of our two groups
    (JAG/XMLWS and WG/MC) could be helpful. (Branski) Yes, some overlap
    of the two groups could be beneficial.\
    \
    The group is requesting additional representation from NASA, NESDIS,
    and FHWA. This has been brought up to the CEISC level in the past,
    but WG/MC still does not have these representatives. (Howland) I
    recommend a two tiered approach, a letter from the Federal
    Coordinator to the ICMSSR, and Fred and I work with our contacts in
    NASA and NESDIS to get the correct people for the met codes group.

**Action 07-1.4 Next WG/MC meeting.** Lt Col David Andrus will setup the
next WG/MC meeting in June or July and will aim to have some part of
that meeting overlap or co-host with the JAG/XMLWS.

**Action 07-1.5 WG/MC membership.** In a two pronged approach, Ken
Barnett will ask the Federal Coordinator to send a letter to the ICMSSR
members for agency representation on WG/MC from NASA, FHWA, and NESDIS.
Mr. Howland and Mr. Branski will also use their contacts in NASA and
NESDIS to help get appropriate members named to WG/MC.

5.  [Next Steps Discussion for the Joint Action Group for XML and Web
    Services (JAG/XMLWS)]{.underline}. Summary of the discussion. The
    JAG/XMLWS was formed and did provide some progress towards shaping a
    National position, which has been presented to WMO. WMO is moving to
    have a new expert team to handle XML, NetCDF, and HDF. However, some
    other factors are pushing the need for much more of a National
    standard from this JAG. One of which is the Next Generation Air
    Transportation System (NextGen). The NextGen project is adopting the
    DOD net-centric operations and service oriented architecture
    approach to how they are going to build that capability. FAA, NWS,
    and DOD all have to handshake with this architecture. There is also
    the AWIPS modernization and migration that has a XML component. On
    the international front, besides the WMO effort, there is the
    Eurocontrol effort of modernization of the European air traffic
    system.\
    \
    The key point, to re-energize this JAG, we need full commitment and
    buy in from the agencies that this is an important action. The three
    main agencies dealing with NextGen XML issues (DOD, FAA, and NOAA)
    need to supply membership and allow their representative time to
    work on this issue. A separate ad hoc tri-agency teleconference will
    be setup to help work the Eurocontrol meeting. After the WMO
    Congress and the Eurocontrol meeting, the JAG/XMLWS should meet. Out
    of these meetings there will need to be a change in the JAG's scope,
    Terms of Reference and the implementation of deliverables.

**Action 07-1.6 JAG/XMLWS meeting.** Ken Barnett will setup a JAG/XMLWS
meeting for June or July that may overlap or be co-hosted with the
WG/MC.

**Action 07-1.7 Tri-agency meeting.** Mr. Howland will help facilitate a
meeting with DOD, NOAA, and FAA about Eurocontrol planning meeting.
Meeting will be held April 20, 2007 and an additional meeting in May.

6.  [Next CEISC meeting.]{.underline} A full day to a day and a half,
    face-to-face meeting the week of September 10-14, 2007 will be held
    at OFCM. Possible agenda items: NOAA Net, WG/FM update, WG/MC
    update, JAG/XML update, WMO status update, and Eurocontrol outcomes.

**Action 07-1.8 Meeting availability.** Ken Barnett will send out a
request for availability for the date of the next CEISC and then send
out a final date for the meeting so that members can reserve this time
on their calendars.