--------------------------------------------------------------------------------------------------------------- EGI BROADCAST TOOL : https://operations-portal.egi.eu/broadcast
--------------------------------------------------------------------------------------------------------------- Publication from : Cristina Aiftimiei cristina.aiftimiei@egi.eu Targets : VO managers/vlemed vlemed-vo-managers@biggrid.nl ----------------------------------------------------------------------------------------------------------------
Dear Resource Centre Administrators, NGI & VO Managers. According to dCache release policy and support period, the dCache v. 2.2.X has reached end of support. (http://www.dcache.org/downloads/1.9/index.shtml).
In compliance to the EGI Service Operations Security Policy (https://documents.egi.eu/document/669) [1], unsupported software SHOULD be decommissioned or updated to a supported version before its End of Security Updates and Support, and MUST be retired no later than 1 month after its End of Security Updates and Support. After this date, if a critical vulnerability were to emerge in the software, EGI CSIRT can request the service to be shut down immediately [2].
Because of this, as of September 22 2014, Resource Centre Administrators will start getting alerts about dCache 2.2.Xs deployed in their site. The list of the affected service end-points will be available on the Operations Dashboard of your site: https://operations-portal.egi.eu/dashboard.
Purpose of these alarms is to: 1- pro-actively alert administrators about the need to upgrade dCache services before they reach end of security updates and support; 2- collect information about decommissioning/upgrade plans of the affected products.
IMPORTANT. According to the EGI decommissioning policy [2], the decommissioning deadline expires one month after the end of security updates and support of the software.
**** *For dCache 2.2.X the hard deadline is: 31-10-2014 [3].* ****
dCache software versions are in general detected through nagios tests, which query the information discovery system (BDII), on whose accuracy they depend on.
Please get in touch with your NGI operations staff for more information, or open a GGUS ticket.
Best wishes EGI Operations
[1] a Resource Centre Administrator ''SHOULD follow IT security best practices that include pro-actively applying software patches, updates or configuration changes related to security''. [2] https://wiki.egi.eu/wiki/PROC16#Policy [3] https://wiki.egi.eu/wiki/Software_Retirement_Calendar#dCache_v._2.2.X
---------------------------------------------------------------------------------------------------------------- link to this broadcast : https://operations-portal.egi.eu/broadcast/archive/id/1195 ----------------------------------------------------------------------------------------------------------------