1. Release 4.7 Review Sep 8th 2016

2. Sprint Resource Pages For past sprint, visit: https://connectopensource.atlassian.net/wiki/display/ NHINProgress/Sprint+191+Progress+Summary https://connectopensource.atlassian.net/wiki/display/ NHINProgress/Sprint+191+Progress+Summary For next sprint, visit: https://connectopensource.atlassian.net/wiki/display/ NHINProgress/Sprint+192+Progress+Summary https://connectopensource.atlassian.net/wiki/display/ NHINProgress/Sprint+192+Progress+Summary For complete information on the CONNECT 4.7 visit: https://connectopensource.atlassian.net/wiki/display/ CONNECT4/CONNECT+4.7 https://connectopensource.atlassian.net/wiki/display/ CONNECT4/CONNECT+4.7 2

3. CONNECT - 4.7 (September 6 2016) Upgrade to Hibernate 5.1 Final from 3.2.5 (CONN-1642) –As a CONNECT adopter (VA), I want CONNECT to be upgraded to the latest version of Hibernate so that my implementation is compliant with VA requirements and for security reasons. Update regression/automated environment to WildFly (CONN-1652) –As a CONNECT Developer, I want to migrate the automated test environment and regression test suites from GlassFish server to the WildFly since GlassFish is no longer supported Bug fixes – Event Logging Partner/Community support –FIPS support/WildFly –Forums 3

4. CONNECT 4.7 - Hibernate upgrade Upgrade to Hibernate 5.1 Final from 3.2.5 (CONN-1642) –Research, considerations and design are here - https://connectopensource.atlassian.net/wiki/display/CO NNECTWIKI/Hibernate+Upgrade+from+3.2.5.GA+to+5.1.0. Final https://connectopensource.atlassian.net/wiki/display/CO NNECTWIKI/Hibernate+Upgrade+from+3.2.5.GA+to+5.1.0. Final –Updated Hibernate jars (updates include pom files, hibernate mapping and configuration files, java source code and junit test updates) –Updated deploy scripts for WebLogic, JBoss and WildFly and provided instructions for WebSphere and completed testing on supported application servers 1 –Fixed SonarQube and Fortify issue found 1 Although Glassfish is no longer a supported server with the release of CONNECT 4.7, however Hibernate upgrade was tested on Glassfish server as community courtesy and configuration required for Glassfish are detailed in CONNECT wiki https://connectopensource.atlassian.net/wiki/x/FgDhB https://connectopensource.atlassian.net/wiki/x/FgDhB 4

5. 55 Application Servers Configuration Required CONNECTSystem Administration Module (SAM) WildFly 8.2.1 Final No 1 No Jboss 7.1.1No WebLogic 12.1.1No WebSphere 8.5.5.3No Yes 2 1 Hibernate Upgrade is seamless and all the necessary configurations are part of ear and war 2 Prior to 4.7 System Administration Module deployment on WebSphere require some configuration through WebSphere Admin Console. With Hibernate upgrade in 4.7, one new configuration and some dependent jars are introduced to System Administration Module. More information on this is available at https://connectopensource.atlassian.net/wiki/x/CYDwBhttps://connectopensource.atlassian.net/wiki/x/CYDwB CONNECT 4.7 - Hibernate upgrade Application Server specific configurations associated with Hibernate upgrade (CONN-1642)

6. CONNECT 4.7 – Infrastructure updates Updating regression/automation environment to WildFly (CONN-1652) –Implemented WildFly plug-in to Maven Leverages existing configuration and minimal impact on codebase. No additional JUnit tests as compared to Arquillian. Easy to upgrade versions of WildFly –JMX configuration and integration into CI complete –Jenkins/CI and regression scripts updated –Implementation documentation updated: –https://connectopensource.atlassian.net/wiki/x/DIAGBhttps://connectopensource.atlassian.net/wiki/x/DIAGB –FIPS 140-2 implemented successfully on WildFly-8.2.1: https://connectopensource.atlassian.net/wiki/x/AgB5B https://connectopensource.atlassian.net/wiki/x/AgB5B

7. CONNECT 4.7 - Security/scans Security scans –SonarQube - All critical and blocker issues addressed Integrated GitHub plugin to detect code quality before merging any pull request (PR). –Fortify - All Critical, High, Medium and Low Cat1 issues addressed –System Administration Module (SAM): Upgraded from SHA1 to SHA2-512 Addressed Session Fixation Implemented Http Header Injection security

8. Release 4.7 Documentation Release 4.7 –Release Notes https://connectopensource.atlassian.net/wiki/display/ CONNECT4/4.7+Release+Noteshttps://connectopensource.atlassian.net/wiki/display/ CONNECT4/4.7+Release+Notes –Release Testing https://connectopensource.atlassian.net/wiki/display/ CONNECT4/4.7+Test+Plan+and+Release+Testinghttps://connectopensource.atlassian.net/wiki/display/ CONNECT4/4.7+Test+Plan+and+Release+Testing –Installation Documentation https://connectopensource.atlassian.net/wiki/display/ CONNECT4/Installing+CONNECT+4.7https://connectopensource.atlassian.net/wiki/display/ CONNECT4/Installing+CONNECT+4.7

9. Other support tasks last sprint Connectopensource.org migration –https://www.healthit.gov/FHA/CONNECThttps://www.healthit.gov/FHA/CONNECT Research on TLS issue (CONN-1683)– –https://connectopensource.atlassian.net/wiki/dis play/CONNECTWIKI/NIST+TLS+Protocol+Upgrade+ Requirementshttps://connectopensource.atlassian.net/wiki/dis play/CONNECTWIKI/NIST+TLS+Protocol+Upgrade+ Requirements

10. Questions or Discussions? 10

11. Sprint 192 - Proposed Themes Development / Community Support Sprint 192 themes –Release demo –Update CONNECT_integration branch –Review security scans Support OP&P 11 CONN-1683 11

12. CONNECT 4.7 (Released Sep6 2016) 4.7 - https://connectopensource.atlassian.net/wiki/x/BIBcBhttps://connectopensource.atlassian.net/wiki/x/BIBcB Release Notes –https://connectopensource.atlassian.net/wiki/x/B4BcBhttps://connectopensource.atlassian.net/wiki/x/B4BcB Binaries –https://connectopensource.atlassian.net/wiki/x/fgAeBQhttps://connectopensource.atlassian.net/wiki/x/fgAeBQ Installation Documentation –https://connectopensource.atlassian.net/wiki/x/B4DwBhttps://connectopensource.atlassian.net/wiki/x/B4DwB Release Testing Documentation –https://connectopensource.atlassian.net/wiki/x/CYD6Bhttps://connectopensource.atlassian.net/wiki/x/CYD6B Source Code –https://connectopensource.atlassian.net/wiki/x/KIChhttps://connectopensource.atlassian.net/wiki/x/KICh 12

13. Stay Connected, Communicate and Collaborate Find out more about FHA CONNECT on the ONC website: http://www.healthit.gov/FHA/CONNECT http://www.healthit.gov/FHA/CONNECT Schedule a meeting with me or send me your thoughts at: federal.health@hhs.govfederal.health@hhs.gov Subscribe, watch, and share: @ONC_FHA, @CONNECT_Project Federal Health Architecture http://www.flickr.com/photos/federalhealtharchitecture/ 13