1. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA U N C L A S S I F I E D Slide 1 Review and Release Safebox Frances Knudson April 9, 2013 LA-UR-13-22456

2. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Review & Release (RASSTI) First full version released March 6, 2012. One step is still paper based – initial derivative classifier (DC) review. This step consumes unnecessary resources - time, paper, mileage, gas. Some currently email the content to the DC - this can cause havoc if there is a classification problem. There have been cases of a mismatch between what the DC reviewed and what was actually submitted. Next phase is to handle controlled unclassified information (CUI) submissions. Slide 2

3. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Safebox – Technical Details Windows Server 2008 R2 running Hyper-V Manager hosts virtual machine safebox, also running Windows Server 2008 R2 Apache module OpenSSL configured and loaded enables HTTPS connections to safebox with 256-bit encryption Accessed via Remote Desktop Protocol (RDP) WIN domain restricted – all LANL employees have WIN account No service access to safebox. Web pages including PDFs hosted by safebox are only accessible locally Slide 3

4. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Division of Labor RASSTI - will handle metadata entry/review, record submissions and approvals. SAFE-REVIEW (web service) will only be used to upload and view PDFs. No other activity will occur on SAFE-REVIEW Mimics current process – working in browser for metadata; working in another window (ie paper) for reviewing Slide 4

5. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Process Flow Users will web login (crypto password) onto RASSTI system. Metadata will be entered. PDFs will be uploaded onto SAFE-REVIEW. First access user will have to download.rdp file. To access PDF, users (authors, submitters, reviewers) will remote log onto safe-review via RDP by providing their WIN domain password. The user will then to web login (crypto password) onto SAFE-REVIEW. The user will only see details based on Z number and role(s). Slide 5

6. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Slide 6

7. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Slide 7

8. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Slide 8

9. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Slide 9

10. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA Slide 10

11. Operated by Los Alamos National Security, LLC for the U.S. Department of Energys NNSA De-Contamination Plan Removal/deletion of the virtual machine. Restore virtual machine to the last configured state via snapshot (pre-file contamination. Determine which files need to be reloaded. Contact authors/submitters. Negotiate with security folks for in-situ cleanup. Machines reside in property-protection area. Prearrange rapid notification with security incident team Downtime estimate 15 minutes to 1 hour. Slide 11