Sprint 175 Review / Sprint 176 Planning Jan 11 th – Jan 25 th 2016 – s175

Sprint Resource Pages For past sprint, visit: NHINProgress/Sprint+175+Progress+Summary NHINProgress/Sprint+175+Progress+Summary For next sprint, visit: NHINProgress/Sprint+176+Progress+Summary NHINProgress/Sprint+176+Progress+Summary For complete information on the CONNECT 4.5 release visit: CONNECT4/CONNECT CONNECT4/CONNECT+4.5 2

Sprint 175 Summary 3 Points completed in sprint (velocity) = 17

Sprint Development Security Scans and Testing –Fixed Fortify issues E.g. - Race condition : Singleton, Access control-Database, Null Dereference, Often Misused-Authentication Zero Critical, High, Mediums and Cat I ECT4/Fortify+Scan+Documentation (DRAFT) ECT4/Fortify+Scan+Documentation –Fixed SonarQube issues Zero Criticals and Blockers ECT4/SonarQube+Scan+Analysis(DRAFT) ECT4/SonarQube+Scan+Analysis –Upgrade to commons-collections 3.2.2(OWASP Dependency Check) 4

Sprint Development Updated CXF unbundle for Release 4.6(CONN- 1632/CONN-1625) Performance Testing –Fixed X12 performance issues for X12 Batch Response –Validated updates on WildFly, WebLogic, WebSphere,GlassFish Audit logging for specification compliance –Cleanup/small bugs –Viewer demo prep 5

Sprint Development Audit logging for spec compliance feature summary –Scope - PD, QD, RD, DS and X12 auditing at gateway –System Administration Module /Audit viewer (search & view) –Auditing requirements, Audit viewer requirementsAuditing requirementsAudit viewer requirements –Audit design including ATNA message, Audit viewer designAudit design including ATNA messageAudit viewer design –Updated regression scripts - Pass-through, StandardPass-throughStandard Tasks for feature wrap-up –Complete testing on all application servers –Small bug fixes 6

Sprint Partner/Community Support Created RC1 patch for SSA and DOD –SSA Setting up CONNECT 4.5 in test WAS environment(CONN-1625 In Progress) –Access denied error, proxy issue Identified issue as 3 jars missing in CXF unbundle. –Release patch RC1 provided to SSA included the jars below cxf-tools-wsdlto-frontend-jaxws cxf-tools-common cxf-tools-wsdlto-frontend-jaxws –SSA successfully validated the patch DoD 4.5 requires internet access which was not the case in 4.3 and 4.4 (CONN-1632 In Progress) –Fix identified to be the same as that needed for SSA. –Release patch RC1 provided to DOD 7

Sprint Partner/Community Support DoD –Question around setup of CONNECT 4.4 and the integrated Adaptor (CONN Closed) Initiating gateway had been set to standard mode. After verifying this and switching to pass-through mode, the Doc Query request was sent out without any database calls to the correlations table. –Adapter functionality to route inbound NwHIN requests to multiple endpoints by AA New functionality requested, added to backlog – (CONN-1634) CMS –CMS/esMD documentation questions Internal connection info/FIPS support discrepancies Follow-up sent to esMD support team/Elaine 8

Sprint Partner/Community Support Community (MedVA) Grizzly Interrupting idle Thread: http-thread-pool (CONN-1635) Forums HTTP thread issue Log4j initialization/WebLogic 9

Sprint Proposed Themes Development / Community Support Sprint 176 themes –Research/Bug fixes Apache common collections jar conflicts on WebLogic Concurrent Modification Exception occurs in ConnectionManagerCacheHelper Audit service timeout exception for PD pass through –Security scans/testing Addressing FindBugs high priority tickets Complete addressing Fortify issues –Managing Board Update/Demo prep –Partner/Community support –FHA/CONNECT webinar at FIU 10

CONNECT 4 - Partner and Community Support Current Partner Contacts ( Partners please validate) 11 AgencyAgency POCs DoD Lauren Thompson Monica Farah-Stapleton Crystal Baum John Keane (SCQC Team) Sean Miller (Dev Mgr, ManTech) Steven Phillips (Dev Mgr, ManTech) VA Elaine Hunolt Margaret Donohue David Seitz Todd Turner Del Johnson Dick Rickard CMS Melanie Combs-Dyer Elaine Wigginton Walter Dill Walden D. Byers(CMS/OIS) Aaron Walters (CMS/OFM) SSA Marty Prahl Kitt Winter Tom Davidson Dave Arvin

CONNECT 4 - Partner and Community Support Current Partner Supported Platforms in production 12 AgencyCONNECT VersionJVM Application Server Server Platform DoD JBoss 6.2 Red Hat Linux version bit VA WebLogic Red Hat Linux version bit CMS WebSphere 8.5Solaris Sparc 10 and x86 SSA WebSphere 8.5Sun Solaris Sparc 10

CONNECT 4 - Partner and Community Support Supported application servers WebLogic WebSphere 8.5 Supported product versions Jboss AS WildFly 8.x --- Open source application server 13

CONNECT 4 Community Announcements CONNECT Awareness – Open sprint review and planning updates Look for Sprint Summaries ss/Progress+Summary+Page ss/Progress+Summary+Page Ask questions and participate in discussions on the CONNECT forums – CONNECT 4 Blogs and Forum posts – CONNECT CONNECT CONNECT

CONNECT 4 Custodial Agent and Community Support Ongoing Product Backlog work, CCB and CONNECT Roadmap Updates –Finalized as of March 31st Top focus to be on projects that facilitates implementation, exchange partner testing/onboarding and lower operational burden The Roadmap can be found on the CONNECT wiki: CONNECT 2015 RoadmapCONNECT 2015 Roadmap Product Backlog –JIRA Product BacklogJIRA Product Backlog 15

Questions or Discussions? 16

FHA Overview Established by the Office of Management and Budget as an E- Government Line of Business (LoB) Initiative Supports federal activities related to the development and adoption of health IT standards and policies Ensures that federal agencies seamlessly and securely exchange health data with other agencies, government entities, and with other public and private organizations 17

Stay Connected, Communicate and Collaborate Find out more about FHA on the ONC website: Schedule a meeting with me or send me your thoughts at: Subscribe, watch, Federal Health Architecture 18

Backup Slides 19

CONNECT 4 - WildFly Open source application server – WildFly –Product team to use WildFly as development app server – WIKI/Community+Application+Server+Migrationhttps://connectopensource.atlassian.net/wiki/display/CONNECT WIKI/Community+Application+Server+Migration –Oracle announced sun setting commercial support for future major releases of GlassFish Server –WildFly is an open source Application server ( JBoss Community version) One federal partner (DoD) already testing with JBoss for future upgrade FIPS configurable implementation Strong community and Red Hat support Clear support path from JBoss WildFly to EAP (Commercial version) Ease of installation, configuring, and upgrade 20

CONNECT 4 – WildFly Open source application server – WildFly Development and new feature testing will be done on WebLogic, WebSphere, JBoss and WildFly only. Product team’s regression testing will be executed on WildFly. Regression/automated environment will be in GlassFish with plans to move to WildFly in the near future. Installation testing at release time will be done on GlassFish for one more release to provide time for the community to make any changes. Federal partners are encouraged to communicate with their trading partners about switching to WildFly to avail of new features in future and also to become aware of ‘Oracle/GlassFish sun-setting support’ announcements. 21

Sprint Partner/Community Support CONNECT is now an eHealth Exchange Validated System overview/ehealth-exchange-validated-productshttp://sequoiaproject.org/ehealth-exchange/testing- overview/ehealth-exchange-validated-products 22

CONNECT 4 – Planned activities CONNECT – Planned activities until March 2016 –Release 4.6 ( Scheduled for mid March ) Audit Trail and Node Authentication (ATNA) compliant audit logging across all Gateway services – 90% COMPLETE –Audit Log events for PD, QD, RD, DS and X12 services –Search/view audit events using System Administration Module Performance testing - 25% COMPLETE Release tasks - security and code quality testing, release testing, external compliance validation, documentation - INPROGRESS –eHealth Exchange/Product certification – COMPLETE DEC 2015 –Support Partner / community – installation, upgrades, questions - ONGOING 23

CONNECT 4 – Latest Release 4.5 CONNECT 4.5 released on July 13 Release artifacts for CONNECT 4.5 –Interoperability Testing completed - passed Interoperability Testing results –Installation Testing completed - passed Installation Testing results –Regression Testing completed - passed Regression Testing results –Release notes are herehere –Installation instructions are herehere –Binaries are herehere –Source code is herehere 24