• About Us/Policies
• Accounts
• Cable TV/Video
• Computing Services
• Computing Sites
• E-Mail
• Enterprise Apps
• Hardware
• Help
• Hosting/File Storage
• ID Cards
• IT Security
• IT Training
• Media Services
• Network Services
• New to MU?
• Printing
• Research Computing
• Software
• Student Phones
• Telecom Services

Faculty/Staff Edition, February 2008

Emergency Mass Notification System Update

In case of emergency or on-campus threat, the University of Missouri can notify you (students, faculty and staff on each campus) by voice and text message as well as e-mail. All you need to do is add your emergency contact information to the Emergency Mass Notification System (EMNS). Individuals are responsible for keeping their own information up to date.

Faculty and staff should add or update their information in UM Web Applications.

1. Click Web Applications.
2. Log in using your PawPrint (SSO ID) and password.
3. Click Employee Information.
4. Click University Emergency Info.
5. Enter your contact information.
6. Click Submit Changes.
7. Log out.

Project to Protect Social Security Numbers Underway

The approach is analogous to a coat check service or safety deposit box in a bank vault. Such services accept delivery of an item or object from a customer and securely hold it. In exchange for the item, the service provides the customer with a token in the form of a claim ticket or key. When the customer seeks to recover the item, they present their claim ticket or key; the service retrieves the item and delivers it to the customer or the customer's designee.

In the case of the SSN vault, the item secured is a social security number. The University's SSN vault is more restrictive than the analogies above, in that mere possession of the ticket or key is not sufficient to retrieve an SSN. The business process or person seeking the SSN must also prove who they are, and they must be pre-authorized to retrieve the number.

To make this work, any University business activity or process that acquires an SSN from an employee, student, customer, patient, vendor, etc., must be altered to place the SSN into the vault. The business process must take the value on the "claim ticket" issued by the vault — an alternate ID number — and save it into the recordkeeping system where the business process had previously recorded the true SSN.

Any business process that requires the true SSN thereafter (e.g., tax reporting or foreign student registration) must be altered to submit the alternate ID number to the SSN vault to re-acquire the SSN. In most cases we'll define the security system to limit use of the true SSNs to the government agency requiring the data.

The SSN vault and altered business processes improve our overall security posture by reducing the number of data systems holding SSNs. Instead of storing them in dozens of places as we do today, we will have only one place where we must maintain high security. Additionally, access to the vault must be pre-approved, and the vault software will log and audit all retrievals. The end results are that fewer people will routinely handle SSNs, and derivative documents (such as spreadsheets, email messages, and other electronic records) containing data from our administrative databases will not reveal SSNs.

The SSN Remediation project began last summer. The first systems to be integrated were the alumni databases for each of the four campuses and the Identity Management system used to manage network logon accounts and electronic mailboxes. The next phase will focus on the Financial, HR, Payroll, and Benefits systems.

It is important to note this effort is not solely a technology initiative; it is a complete rethinking of how we use SSNs in our daily business processes. You'll no doubt hear more about the project in the coming months, including in future editions of TechKnowledge.

TigerNet Wireless Network to be Removed from Service

TigerNet uses the WEP protocol for data privacy. WEP has shortcomings:

• WEP is not very secure. The WEP key is easily cracked, making it relatively easy for someone to eavesdrop on your wireless data communications, including web browsing, e-mail, and file transfers. It's also fairly easy for people with no MU affiliation to obtain the WEP key from someone working at MU, allowing them to access the wireless network and use our resources (such as Internet bandwidth).
• The WEP key must be distributed to all wireless network users and configured on every wireless computer. In addition, the key must be changed occasionally to limit, at least for a while, the number of non MU-affiliated users on the wireless network. This is a support problem and is inconvenient for everyone.

TigerNet1x uses the 802.1x protocol to improve data privacy and network access and has the following benefits:

• 802.1x allows wireless network access via PawPrint (SSO ID) authentication. Your PawPrint and password are strongly encrypted to protect them against theft. Only users with an MU affiliation have a PawPrint, thus preventing nonaffiliated persons access to our network.
• There is no key to be distributed, which is much more convenient for users and support staff.
• 802.1x supports several types of data encryption. When properly configured, it provides very strong encryption, making it all but impossible to eavesdrop on wireless communications.

For information on how to configure your wireless-enabled laptop or other device to use TigerNet1x, please visit the IT KnowledgeBase. For additional information about wireless networking on campus, please refer to the Division of IT's Wireless page.

CMS Puts Web Editing Within Reach

• Delegate maintenance responsibilities so that nontechnical staff can update content
• Use the same content in multiple places and/or publish content in multiple formats (HTML, PDF, Word, etc.)
• Control access privileges so that only designated users can change design or structure
• Schedule automatic publishing at specific times or dates
• Remind contributors to review or update content regularly
• Check sites for broken links, spelling errors, or accessibility issues

Setting up a site in the CMS requires a greater initial time investment, but once a site is created, it's easy to allow nontechnical users access to update site content. This can be especially useful for departments or organizations that don't have a designated Web editor with the technical skills to use HTML editors or other Web management tools.

That's why the MU Faculty Council recently moved their site (facultycouncil.missouri.edu) to the CMS. Leah Cohn, Faculty Council Executive Committee member, said, "The ability to maintain a current and accurate website directly impacts not only the ability of the council to communicate to all faculty, but the ability of the Faculty council to function. Previously, we had to rely on the kindness of IT personnel in a number of divisions on campus to update the site as time became available. We will now be able to handle this duty routinely on our own allowing us to post agendas, minutes of meetings, and supporting documentation for discussion items as well as keeping policy handbooks current."

Some of the MU Web sites that are using the CMS include:

• The official MU Web site (www.missouri.edu)
• Admissions (admissions.missouri.edu)
• College of Education (education.missouri.edu)
• Office of the Chancellor (chancellor.missouri.edu)
• Undergraduate Research (undergradresearch.missouri.edu)

MU's Office of Web Communications manages Cascade CMS site deployment. For more information about the CMS or to get a Project Proposal form (required to obtain a CMS site), visit webcom.missouri.edu/tools/cms/.

Web Hosting Migration Project Update

The DWHS Migration Project team is assisting departments with migration of their sites, while simultaneously cleaning up the Bengal Web server environment. Many sites have already migrated.

Benefits of the Departmental Web Hosting Service include minimal site downtime, system monitoring, virtual web hosting, access to technical training, data backup and restore, Web statistics, and more. Linux/Apache, Windows/IIS, and Cascade Content Management System (CMS) configurations are available.

Bengal will continue to host individual student, faculty, and staff data and Web sites.

For more information, visit the Division of IT's Departmental Web Hosting page. To request migration of a Bengal-hosted departmental Web site to the DWHS environment, please submit a Bengal migration request form.

News Bytes

• The Division of Information Technology now offers online departmental ordering for a wide range of Adobe and Microsoft products. Product lists, prices and order forms are available at the Division of IT software sales pages.
• Are you or someone you know using technology at MU to enhance the student learning environment or process? The annual Excellence in Teaching with Technology Awards recognize faculty, staff, graduate instructors, and teaching assistants who use technologies and demonstrate excellence in teaching. MU faculty, staff, and students are eligible to submit nominations prior to March 31, 2008. To find out more and submit nominations online, visit provost.missouri.edu/faculty/awards/technology.html.
• Get ready for Office 2007 by attending one or all of IT Training's primer courses. The courses are shorter than our regular courses and focus on new features, like the ribbon. IT Training is in the process of converting from 2003 to 2007 for our more comprehensive courses as well. You should see them popping up on the schedule after spring break. To sign up for a primer, visit the IT Training page.

Cold-Weather Tips for Laptops

Store carefully. Never leave a laptop in the trunk of your car in cold weather, even if it's in an insulated case. If your laptop freezes, you could lose all your data.

Let your laptop warm up. After bringing a laptop in from the cold, let it warm up to room temperature before starting it. The display is especially vulnerable. Don't use a heating pad to "thaw" a frozen laptop display! Allow it to warm up on its own before you start up.

Use a laptop warmer.... These devices, designed specifically to keep a laptop warm, have been tested for safety and effectiveness and are a good investment.

...but avoid excessive heat buildup. Too much heat is as bad for your laptop as too little. Don't use mug warmers or pocket warmers to heat your laptop! These devices can cause problems if they heat the wrong parts of a laptop and can even melt internal components. Also, don't use your laptop while it's in its bag (or anywhere else that doesn't allow adequate air circulation) — inadequate ventilation can cause the processor to overheat.

Change your laptop's power settings. If your laptop uses the "power save" mode, turn it off. A running laptop will stay warmer than one that's asleep, as it generates its own heat.

OneNote Helps You Collect, Organize, Share Notes

Some of the things you can do with OneNote:

• Share notes with other team members or students via email. In addition to your own notes, OneNote enables you to clip an image from your browser and even places the referenced URL in the notes.
• Record a meeting or lecture for later reference. OneNote associates the audio to the notes you take. As you listen to the audio later, OneNote highlights your notes on your computer screen.
• Tag important notes. With just a click, you can apply a star to an note item to help find it later. The star is just one of many tags you can apply.
• Flag notes to show up in your Outlook Task Pad to remind you of an action item recorded during a meeting or lecture.
• Ink notes with a tablet PC. Instead of typing, you can handwrite notes and later convert them into text. Obviously, your handwriting must be legible!

Don't take notes on paper and tediously type them into your laptop any longer. Do it once and save time. To learn how to use OneNote 2007, sign up for a free course with IT Training.

IT Rates to Change in FY09

If you have questions please contact Nikki Witting at 882-2000 or WittingN@missouri.edu.

Code Analyzer Software Supports Application Security

The policy applies to custom applications developed by MU faculty/staff as well as to those acquired from vendors or other outside providers. All applications that use or store University data are subject to this policy, regardless of where the application is hosted.

The Division of IT now offers licenses for Fortify Source Code Analyzer. This software helps developers identify threats posed by security flaws in their software. Application developers can run Fortify against their programming code to identify and resolve common errors and security vulnerabilities. Also, developers who utilize Fortify to check their code may be able to reduce the amount of time it takes for the Information Security and Account Management team (ISAM) to perform a security audit on their application. Information about the licensing structure and yearly cost is available on the Division of IT's Fortify Source Code Analyzer page.

Direct your questions about the Application Security Policy, the auditing process, or Fortify licensing to isam@missouri.edu.

Sprint BCEE Service to End

This change will affect only Sprint customers who are BCEE subscribers. Beginning March 31, subscribers' phones will continue to work, but they will no longer get e-mail and calendar updates.

Windows Mobile will replace BCEE as the preferred solution for mobile access to e-mail, calendar, and contacts.

Please see the Division of IT's Sprint cellular page for departmental and individual customer service information.

Computer Purchase Contract Updates

Departments and individuals may go through TigerTech, the Dell and HP web sites, or the new eProcurement system (Show-Me Shop) to configure and purchase computers using these contracts.

The University has also awarded a contract to CDW-G for purchasing computer peripherals (hardware and software). Departments may purchase using the CDW-G web site or the new eProcurement system (Show-Me Shop).

For more information about IT contracts available to the University of Missouri, please refer to the UM Procurement Services VPA site. For details about computer purchasing, please see the Division of IT's Campus Desktop Purchasing Program page.

February 2008 Oracle/PeopleSoft Update

• Completed work for the W-2 and 1099 forms for UM employees.
• Work is underway to load student photos for UMKC and MS&T into the PS Student System to assist Admissions in their work.
• Supporting the rollout of ePro (the eProcurement PeopleSoft-based system) to all UM campuses.
• Finalized plan for upgrade of PS Financial Management to v9.0. This upgrade will start in February with a completion date of November 2008.
• Phase I of Connect EDU is in progress and has been implemented for all UM campuses. Phase II is in its planning stages.

Upcoming projects and goals include:

• Time and Labor implementation (all campuses and UM System)
• Social Security Number theft risk mitigation
• Self-service HR funcitons including eProfile, ePay, and eBenefits
• Student financial aid processing in PeopleSoft for MU
• Pension administration for retirees