1. Sprint 175 Review / Sprint 176 Planning Jan 11 th – Jan 25 th 2016 – s175

2. Sprint Resource Pages For past sprint, visit: https://connectopensource.atlassian.net/wiki/display/ NHINProgress/Sprint+175+Progress+Summary https://connectopensource.atlassian.net/wiki/display/ NHINProgress/Sprint+175+Progress+Summary For next sprint, visit: https://connectopensource.atlassian.net/wiki/display/ NHINProgress/Sprint+176+Progress+Summary https://connectopensource.atlassian.net/wiki/display/ NHINProgress/Sprint+176+Progress+Summary For complete information on the CONNECT 4.5 release visit: https://connectopensource.atlassian.net/wiki/display/ CONNECT4/CONNECT+4.5 https://connectopensource.atlassian.net/wiki/display/ CONNECT4/CONNECT+4.5 2

3. Sprint 175 Summary 3 Points completed in sprint (velocity) = 17

4. Sprint 175 - Development Security Scans and Testing –Fixed Fortify issues E.g. - Race condition : Singleton, Access control-Database, Null Dereference, Often Misused-Authentication Zero Critical, High, Mediums and Cat I https://connectopensource.atlassian.net/wiki/display/CONN ECT4/Fortify+Scan+Documentation (DRAFT)https://connectopensource.atlassian.net/wiki/display/CONN ECT4/Fortify+Scan+Documentation –Fixed SonarQube issues Zero Criticals and Blockers https://connectopensource.atlassian.net/wiki/display/CONN ECT4/SonarQube+Scan+Analysis(DRAFT)https://connectopensource.atlassian.net/wiki/display/CONN ECT4/SonarQube+Scan+Analysis –Upgrade to commons-collections 3.2.2(OWASP Dependency Check) 4

5. Sprint 175 - Development Updated CXF unbundle for Release 4.6(CONN- 1632/CONN-1625) Performance Testing –Fixed X12 performance issues for X12 Batch Response –Validated updates on WildFly, WebLogic, WebSphere,GlassFish Audit logging for specification compliance –Cleanup/small bugs –Viewer demo prep 5

6. Sprint 175 - Development Audit logging for spec compliance feature summary –Scope - PD, QD, RD, DS and X12 auditing at gateway –System Administration Module /Audit viewer (search & view) –Auditing requirements, Audit viewer requirementsAuditing requirementsAudit viewer requirements –Audit design including ATNA message, Audit viewer designAudit design including ATNA messageAudit viewer design –Updated regression scripts - Pass-through, StandardPass-throughStandard Tasks for feature wrap-up –Complete testing on all application servers –Small bug fixes 6

7. Sprint 175 - Partner/Community Support Created 4.5.1 RC1 patch for SSA and DOD –SSA Setting up CONNECT 4.5 in test WAS environment(CONN-1625 In Progress) –Access denied error, proxy issue Identified issue as 3 jars missing in CXF unbundle. –Release patch 4.5.1 RC1 provided to SSA included the jars below cxf-tools-wsdlto-frontend-jaxws cxf-tools-common cxf-tools-wsdlto-frontend-jaxws –SSA successfully validated the patch DoD 4.5 requires internet access which was not the case in 4.3 and 4.4 (CONN-1632 In Progress) –Fix identified to be the same as that needed for SSA. –Release patch 4.5.1 RC1 provided to DOD 7

8. Sprint 175 - Partner/Community Support DoD –Question around setup of CONNECT 4.4 and the integrated Adaptor (CONN-1636 -Closed) Initiating gateway had been set to standard mode. After verifying this and switching to pass-through mode, the Doc Query request was sent out without any database calls to the correlations table. –Adapter functionality to route inbound NwHIN requests to multiple endpoints by AA New functionality requested, added to backlog – (CONN-1634) CMS –CMS/esMD documentation questions Internal connection info/FIPS support discrepancies Follow-up email sent to esMD support team/Elaine 8

9. Sprint 175 - Partner/Community Support Community (MedVA) Grizzly Interrupting idle Thread: http-thread-pool- 8080 (CONN-1635) Forums HTTP thread issue Log4j initialization/WebLogic 9

10. Sprint 176 - Proposed Themes Development / Community Support Sprint 176 themes –Research/Bug fixes Apache common collections jar conflicts on WebLogic Concurrent Modification Exception occurs in ConnectionManagerCacheHelper Audit service timeout exception for PD pass through –Security scans/testing Addressing FindBugs high priority tickets Complete addressing Fortify issues –Managing Board Update/Demo prep –Partner/Community support –FHA/CONNECT webinar at FIU 10

11. CONNECT 4 - Partner and Community Support Current Partner Contacts ( Partners please validate) 11 AgencyAgency POCs DoD Lauren Thompson Monica Farah-Stapleton Crystal Baum John Keane (SCQC Team) Sean Miller (Dev Mgr, ManTech) Steven Phillips (Dev Mgr, ManTech) VA Elaine Hunolt Margaret Donohue David Seitz Todd Turner Del Johnson Dick Rickard CMS Melanie Combs-Dyer Elaine Wigginton Walter Dill Walden D. Byers(CMS/OIS) Aaron Walters (CMS/OFM) SSA Marty Prahl Kitt Winter Tom Davidson Dave Arvin

12. CONNECT 4 - Partner and Community Support Current Partner Supported Platforms in production 12 AgencyCONNECT VersionJVM Application Server Server Platform DoD4.3.11.7JBoss 6.2 Red Hat Linux version 6.5 - 64 bit VA4.2.2.21.7WebLogic 12.1.1 Red Hat Linux version 6.1 - 64 bit CMS4.2.11.7WebSphere 8.5Solaris Sparc 10 and x86 SSA4.3.21.7WebSphere 8.5Sun Solaris Sparc 10

13. CONNECT 4 - Partner and Community Support Supported application servers WebLogic 12.1.1 WebSphere 8.5 Supported product versions 4.5 4.4.1 4.3.2 4.2.2.2 Jboss AS 7.1.1 WildFly 8.x --- Open source application server 13

14. CONNECT 4 Community Announcements CONNECT Awareness – Open sprint review and planning updates Look for Sprint Summaries https://connectopensource.atlassian.net/wiki/display/NHINProgre ss/Progress+Summary+Page https://connectopensource.atlassian.net/wiki/display/NHINProgre ss/Progress+Summary+Page Ask questions and participate in discussions on the CONNECT forums – CONNECT 4 Blogs and Forum posts http://www.connectopensource.org/developer-resources/forums – CONNECT 4.5 https://connectopensource.atlassian.net/wiki/display/CONNECT4/ CONNECT+4.5 https://connectopensource.atlassian.net/wiki/display/CONNECT4/ CONNECT+4.5 14

15. CONNECT 4 Custodial Agent and Community Support Ongoing Product Backlog work, CCB and CONNECT Roadmap Updates –Finalized as of March 31st Top focus to be on projects that facilitates implementation, exchange partner testing/onboarding and lower operational burden The Roadmap can be found on the CONNECT wiki: CONNECT 2015 RoadmapCONNECT 2015 Roadmap Product Backlog –JIRA Product BacklogJIRA Product Backlog 15

16. Questions or Discussions? 16

17. FHA Overview Established by the Office of Management and Budget as an E- Government Line of Business (LoB) Initiative Supports federal activities related to the development and adoption of health IT standards and policies Ensures that federal agencies seamlessly and securely exchange health data with other agencies, government entities, and with other public and private organizations 17

18. Stay Connected, Communicate and Collaborate Find out more about FHA on the ONC website: http://www.healthit.gov/FHA http://www.healthit.gov/FHA Schedule a meeting with me or send me your thoughts at: federal.health@hhs.govfederal.health@hhs.gov Subscribe, watch, and share: @ONC_FHA, @CONNECT_Project Federal Health Architecture http://www.flickr.com/photos/federalhealtharchitecture/ 18

19. Backup Slides 19

20. CONNECT 4 - WildFly Open source application server – WildFly –Product team to use WildFly as development app server –https://connectopensource.atlassian.net/wiki/display/CONNECT WIKI/Community+Application+Server+Migrationhttps://connectopensource.atlassian.net/wiki/display/CONNECT WIKI/Community+Application+Server+Migration –Oracle announced sun setting commercial support for future major releases of GlassFish Server –WildFly is an open source Application server ( JBoss Community version) One federal partner (DoD) already testing with JBoss for future upgrade FIPS configurable implementation Strong community and Red Hat support Clear support path from JBoss WildFly to EAP (Commercial version) Ease of installation, configuring, and upgrade 20

21. CONNECT 4 – WildFly Open source application server – WildFly Development and new feature testing will be done on WebLogic, WebSphere, JBoss and WildFly only. Product team’s regression testing will be executed on WildFly. Regression/automated environment will be in GlassFish with plans to move to WildFly in the near future. Installation testing at release time will be done on GlassFish for one more release to provide time for the community to make any changes. Federal partners are encouraged to communicate with their trading partners about switching to WildFly to avail of new features in future and also to become aware of ‘Oracle/GlassFish sun-setting support’ announcements. 21

22. Sprint 175 - Partner/Community Support CONNECT is now an eHealth Exchange Validated System http://sequoiaproject.org/ehealth-exchange/testing- overview/ehealth-exchange-validated-productshttp://sequoiaproject.org/ehealth-exchange/testing- overview/ehealth-exchange-validated-products 22

23. CONNECT 4 – Planned activities CONNECT – Planned activities until March 2016 –Release 4.6 ( Scheduled for mid March ) Audit Trail and Node Authentication (ATNA) compliant audit logging across all Gateway services – 90% COMPLETE –Audit Log events for PD, QD, RD, DS and X12 services –Search/view audit events using System Administration Module Performance testing - 25% COMPLETE Release tasks - security and code quality testing, release testing, external compliance validation, documentation - INPROGRESS –eHealth Exchange/Product certification – COMPLETE DEC 2015 –Support Partner / community – installation, upgrades, questions - ONGOING 23

24. CONNECT 4 – Latest Release 4.5 CONNECT 4.5 released on July 13 Release artifacts for CONNECT 4.5 –Interoperability Testing completed - passed Interoperability Testing results –Installation Testing completed - passed Installation Testing results –Regression Testing completed - passed Regression Testing results –Release notes are herehere –Installation instructions are herehere –Binaries are herehere –Source code is herehere 24