Obtaining a user account and password: To obtain a user account, please submit the following information to AJRR staff:

Transcription

1 AJRR Secure FTP Site Usage port 22 Contacts: Randolph Meinzer Steve Hamada 6300 North River Road Rosemont, IL p: f: Overview: The AJRR SFTP server is configured to allow upload and directory listing of information submitted to the AJRR using a batch file format. The data file format can be obtained by contacting the AJRR. Technically, the server uses local authentication and self generated certificates enabling secure login and data transaction. Optionally, the AJRR supports site public key authentication for the following key formats: SSH format (as defined in RFC 4716), OpenSSH v2 format, or from a PEM or DER encoded certificate. Each hospital / submitting site is configured with a unique directory for the upload. Data encryption in flight is protected using FIPS validated ciphers. Upon arrival, the data files are automatically encrypted using GNU privacy guard. The original file is deleted using a safe delete utility which conducts 3 write passes of random bit patterns over the data. The passphrase is only known to AJRR staff on a need to know basis and the file remains encrypted until the data is imported into the AJRR registry application. Once the data is transferred to the AJRR registry application, any encrypted files and all temporary files within the SFTP directory are deleted using the safe delete utility. The AJRR will also work with sites to encrypt data prior to uploading. Sites are required to use the AJRR provided certificate and GNU privacy guard utility. (Please contact AJRR Staff if you local policies require encryption prior to upload.) File Naming Conventions: All file names shall be formatted as follows: SITEDDM1DDM2.csv SITE Represents an abbreviation for the institution, hospital or site name. DDM1 Report start day and month of the data set. DDM2 Report end day and month of the data set. Example: UCSF csv Institution or site name University of California San Francisco 0101 Start date January 1 st 0102 End date February 1 st Obtaining a user account and password: To obtain a user account, please submit the following information to AJRR staff: 1. Institution / hospital name 2. Last Name of hospital technical contact 3. First Name of hospital technical contact 4. address 5. Phone number 6. IP Address of SFTP client system

2 Once the AJRR receives the information, a directory, username and temporary password will be created and sent to the address specified. The temporary password may be used for testing the local SFTP client. AJRR requires the site to select a final password that will be exchanged via a phone conversation with the site. AJRR requires passwords to be a minimum of 8 characters with one special character and one numeric digit. If your institution requires password aging the AJRR can set up the server to require aging. It is the responsibility of the site to notify AJRR when a user is locked out of the site to arrange for a new password. Public key authentication AJRR requires that you send your public key to AJRR staff for installation on our secure site. Once installed AJRR requests a test to ensure that the key was installed correctly. AJRR URL: The AJRR SFTP server can be located at Port 22. IP Address Supported SFTP clients: Filezilla Winscp ** Note the AJRR will test other clients or create a temporary account for a site to conduct test transfers using other SFTP clients. NOTE: File Transfer Resume must be disabled on your SFTP client! (See below for Winscp instructions) Test File Upload: To ensure that each site using batch upload is ready for data submission, a test upload to the AJRR SFTP site can be conducted at your discretion using the temporary password. Please include test in the file name to that the AJRR can delete test files once your testing has been completed. Instructions for disabling transfer resume in Winscp Invoke Winscp and select Preferences on the panel on the left side of the window right below Bugs.

3 Then select the preferences button in the middle of the screen as shown below.

4 Then select endurance and check to see if disable is selected. If not select disable as shown below and close the window then save the preferences and exit winscp.

5