CSMS# 19-000165 - Update: Mandatory Change for ALL Trade EZVPN Users
U.S. Customs and Border Protection sent this bulletin at 04/01/2019 06:20 AM EDTYou are subscribed to Trade Policy Updates for U.S. Customs and Border Protection. This information has recently been updated, and is now available.
03/27/2019 04:26 PM EDT
Trade Policy Updates
All trade partners using IBM MQ Client are being requested to check their MQ version and install a currently supported version. IBM MQ v9 is preferred.
CBP is implementing a modernized solution for Trade MQ Client Connectivity. The current Cisco Easy VPN Client (EzVPN) solution has been retired, is no longer supported and must be replaced as soon as possible.
A new Infrastructure has being deployed to support the new connectivity option. CBP will provide a package to replace the EzVPN software that will contain the configuration options to be installed.
The current connectivity software will be replaced with a Certificate based connection methodology using IBM MQ Internet Pass-Thru (MQIPT). The MQIPT conversion mandate is not applicable to trade partners currently using the LAN to LAN connectivity option.
The new implementation will allow trade partners with VPN Client connections to securely connect to CBP MQ gateways via encryption public key certificates. The CBP supplied sample program "CBPPTGT" has been enhanced to utilize a Certificate based connection.
The existing settings utilized by this program will continue to work with the updated program. The new MQIPT solution requires a minimum of IBM MQ v8.0. IBM MQ v9.0 is preferred.
This modernized solution has been tested in all applicable CBP environments and is currently in the Production ‘roll-out phase’ to multiple trade partners.
Please answer (to the best of your ability) the following Questionnaire and return to MQ STAFF OPS GML MQSTAFFOPS@cbp.dhs.gov as soon as possible. Additional details are also available via documents from the CBP Middleware MQ Team.
Related CSMS No. 19-000163
Note that supplemental information to this message is available in the form of one or more file downloads.
Please follow the link in this email message to the CSMS web site to access this information.
All trade partners using IBM MQ Client are being requested to check their MQ version and install a currently supported version. IBM MQ v9 is preferred.
CBP is implementing a modernized solution for Trade MQ Client Connectivity. The current Cisco Easy VPN Client (EzVPN) solution has been retired, is no longer supported and must be replaced as soon as possible.
A new Infrastructure has being deployed to support the new connectivity option. CBP will provide a package to replace the EzVPN software that will contain the configuration options to be installed.
The current connectivity software will be replaced with a Certificate based connection methodology using IBM MQ Internet Pass-Thru (MQIPT). The MQIPT conversion mandate is not applicable to trade partners currently using the LAN to LAN connectivity option.
The new implementation will allow trade partners with VPN Client connections to securely connect to CBP MQ gateways via encryption public key certificates. The CBP supplied sample program "CBPPTGT" has been enhanced to utilize a Certificate based connection.
The existing settings utilized by this program will continue to work with the updated program. The new MQIPT solution requires a minimum of IBM MQ v8.0. IBM MQ v9.0 is preferred.
This modernized solution has been tested in all applicable CBP environments and is currently in the Production ‘roll-out phase’ to multiple trade partners.
Please answer (to the best of your ability) the following Questionnaire and return to MQ STAFF OPS GML MQSTAFFOPS@cbp.dhs.gov as soon as possible. Additional details are also available via documents from the CBP Middleware MQ Team.
Related CSMS No. 19-000163
Note that supplemental information to this message is available in the form of one or more file downloads.
Please follow the link in this email message to the CSMS web site to access this information.