--------------------------------------------------------------------------------------------------------------- EGI BROADCAST TOOL : https://operations-portal.egi.eu/broadcast

--------------------------------------------------------------------------------------------------------------- Publication from : Tiziana Ferrari Tiziana.Ferrari@egi.eu Targets : VO managers/vlemed vlemed-vo-managers@biggrid.nl ----------------------------------------------------------------------------------------------------------------

Dear Resource Centre Administrators and VO Managers.

EMI 1 software will reach end of security updates and support on 30-04-2013 (http://www.eu-emi.eu/releases#MajRel).

In compliance to the EGI Service Operations Security Policy (https://documents.egi.eu/document/669) [1], unsupported software SHOULD be decommissioned before its End of Security Updates and Support, and MUST be retired no later than 1 month after its End of Security Updates and Support. After this date, if a critical vulnerability were to emerge in the software, EGI CSIRT can request the service to be turned off immediately [2].

Because of this, as of March 04 2013, Resource Centre Administrators will start getting alerts about EMI 1 products deployed in their site. Please check the list of your affected service end-points on the Operations Dashboard of your site: https://operations-portal.egi.eu/dashboard.

Purpose of these alarms is to: 1- pro-actively alert administrators about the need to upgrade EMI-1 services before they reach end of security updates and support; 2- collect information about decommissioning/upgrade plans of the affected products.

IMPORTANT. According to the EGI decommissioning policy [2], the decommissioning deadline expires one month after the end of security updates and support of the software. For EMI 1 products this is: 31-05-2013 [3].

EMI 1 software versions are in general detected through nagios tests, which query the information discovery system (BDII), on whose accuracy they depend on. On March 04 2013 alarms will be generated for the following service types (additional service types will get alarms after March 04 as soon as more tests are ready):

- ARC-CE (test: eu.egi.sec.ARC-EMI-1) - CREAM-CE (test: eu.egi.sec.EMI-1) - LB (test: eu.egi.sec.LB-EMI-1) - MyProxy (eu.egi.sec.EMI-1) - Site-BDII (test: eu.egi.sec.Site-BDII-EMI-1) - SRM (test: eu.egi.sec.dCache-EMI-1) - SRM (test: eu.egi.sec.StoRM-EMI-1) - Top-BDII (test: eu.egi.sec.Top-BDII-EMI-1) - WMS (test: eu.egi.sec.EMI-1)

Please get in touch with your NGI operations staff for more information, or open a GGUS ticket.

Best wishes Tiziana Ferrari - EGI Operations

[1] a Resource Centre Administrator ''SHOULD follow IT security best practices that include pro-actively applying software patches, updates or configuration changes related to security''. [2] https://wiki.egi.eu/wiki/PROC16#Policy [3] https://wiki.egi.eu/wiki/Software_Retirement_Calendar#Decommissioning_Calend...

---------------------------------------------------------------------------------------------------------------- link to this broadcast : https://operations-portal.egi.eu/broadcast/archive/id/880 ----------------------------------------------------------------------------------------------------------------