Professional Documents
Culture Documents
: : : : :
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Document Control
Copyright Notice
2005 European Organisation for the Safety of Air Navigation (EUROCONTROL). All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, photocopying, recording or otherwise, without the prior written permission of EUROCONTROL.
Approval Table
AUTHORITY Author Mark Sing Head of OSVM-MW Volker Metzger Head of OSVM Eric Thiaville Head of TEX Benoit Vierset Head of NTS Jean-Pierre AIGUIER DATE SIGNATURE
Document Identification
Full Title: Total Number of Pages: CHMI installation guide version 8.5.3 40
Edition: 8.50
ii
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Head of NTS Head of PPC Head of OSVM Head of SOS CSO Library OSM MW LSE ENGD Librarians
Edition History
Edition No. 1.000 1.200 2.000 2.001 3.000 3.001 3.002 3.003 5.000 5.001 5.002 6.000 6.001 7.000 7.500 8.000 8.001 8.500 Edition Issue Date 28 Oct 05 03 Feb 06 27 May 06 03 May 06 19 Sep 2007 12 Jul 2007 13 Jul 2007 29 Sept 2008 16 Apr. 09 16 Apr. 09 21 Apr. 09 23 Feb 10 23 Feb 10 19 Feb 2011 03 Aug 2011 10 Feb 2012 16 Feb 2012 20 Jul 2012 Author SIN SIN SIN SIN SIN SIN SIN RSL OBA SIN SIN JCB SIN SIN SIN SIN SIN SIN Reason First edition Added info on SITA Help Desk, corrected brenip01 IP address CHMI 3.0.10 Reviewed by CSO (DBS) CHMI 4.0.2 for OPT evaluations CHMI 4.0.5 Reviewed by CSO (DBS) CHMI 4.2.3 CHMI 5.0.3 1st version CHMI 5.0.3 revised version Changed DOMAIN130 CHMI 6.0.4 version CHMI 6.0.4 version update CHMI 7.0.5 version CHMI 7.5.2 version CHMI 8.0.4 version CHMI 8.0.4 version CHMI 8.5.3 version
Edition: 8.50
iii
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Official Official
Official
04/09/2012
Official
System Release
System Release: For CHMI-ATFCM 2.0.4.108 (PAD-000132) for Aos (package MSI333) For CHMI-ATFCM 3.0.10 for Aos (package MSI373) For CHMI-ATFCM 4..0.2 for external evaluations (OPT-session) For CHMI-ATFCM 4..0.5 For CHMI-ATFCM 5.0.3 For CHMI-ATFCM 6.0.4 For CHMI-ATFCM 7.0.5 For CHMI-ATFCM 7.5.2 For CHMI-ATFCM 8.0.4 For CHMI-ATFCM 8.5.3 Edition No.: 1.000 2.000 3.000 3.001 5.001 6.000 7.001 7.500 8.000 8.500
Edition: 8.50
iv
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Table Of Contents
1 Introduction ........................................................................................................................ 8 1.1 Identification ................................................................................................................... 8 1.2 Scope ............................................................................................................................. 8 User Documentation .......................................................................................................... 8 Help Desk ............................................................................................................................ 8 PC Hardware prerequisite ................................................................................................. 9 4.1 Minimum requirements ................................................................................................... 9 4.2 Recommended requirements ......................................................................................... 9 Supported platform ............................................................................................................ 9 Connectivity prerequisite for Internet Connection........................................................ 10 6.1 Network consideration .................................................................................................. 10 6.2 Server consideration..................................................................................................... 10 Connectivity prerequisite for SITA Connection ............................................................ 11 Download CHMI software ................................................................................................ 12 8.1 Via the ftp server (preferred choice). ............................................................................ 12 8.2 Via the web site (second choice).................................................................................. 12 CHMI software packaging info ........................................................................................ 13 Upgrade information ........................................................................................................ 14 10.1 Migration information .................................................................................................... 14 10.2 CHMI 8.0.4 already installed ........................................................................................ 14 10.3 CHMI 8.5.3 installation ................................................................................................. 14 Installation of CHMI software .......................................................................................... 15 11.1 Introduction................................................................................................................... 15 11.2 Retrieve internet proxy information............................................................................... 15 11.3 Installation of the CHMI software.................................................................................. 16 11.3.1 Installation of the CHMI software .......................................................................... 16 11.3.2 Select Installation type .......................................................................................... 20 11.3.2.1 Option 1 Internet connection.......................................................................... 20 11.3.2.2 Option 2 Internet and Extranet connection .................................................... 20 11.3.2.3 Option 3 Extranet connection ONLY.............................................................. 20 11.3.3 Ready to install the application ............................................................................. 23 Import of CHMI preferences. ........................................................................................... 25 v
2 3 4
5 6
7 8
9 10
11
12
Edition: 8.50
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
12.1 Migration of preference files. ........................................................................................ 25 13 Available shortcuts .......................................................................................................... 26 13.1 Internet Shortcuts ......................................................................................................... 26 13.2 Extranet Shortcuts ........................................................................................................ 26 Operations ........................................................................................................................ 27 14.1 Introduction................................................................................................................... 27 14.2 Internet Connection ...................................................................................................... 27 14.3 Extranet Connection. .................................................................................................... 29 RSA SecurID Software Token v. 4.1.1 ............................................................................ 30
14
15
APPENDICES ............................................................................................................................ 31 A Network troubleshooting................................................................................................. 32 A.1 CHMI connected to the SITA network .......................................................................... 32 Set the CHMI application in DEBUG mode .................................................................... 33 To determine CHMI system variables............................................................................. 34 Removal of CHMI ATFCM software ................................................................................ 35 CHMI QueryReplay Viewer .............................................................................................. 36 RSA SecurID information sheet ...................................................................................... 37
B C D E F
Edition: 8.50
vi
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Table Of Figures
Figure 1: Base - Welcome menu ................................................................................................ 16 Figure 2: Base - License agreement........................................................................................... 17 Figure 3: Readme information .................................................................................................... 17 Figure 4: Internet Proxy .............................................................................................................. 18 Figure 5: Base - Destination folder ............................................................................................. 19 Figure 6: Select Installation type................................................................................................. 20 Figure 7: Select features............................................................................................................. 21 Figure 8: Select Features ........................................................................................................... 21 Figure 9: Successfully installed ................................................................................................. 24 Figure 10: CHMI Internet proxy logon......................................................................................... 27 Figure 11: CHMI ACE logon ....................................................................................................... 28 Figure 12: CHMI ACE logon ....................................................................................................... 29 Figure 13: Unable to connect..................................................................................................... 32 Figure 14: Display CHMI system environment ........................................................................... 34 Figure 15: Add or Remove Programs confirmation window 8.0.4 .............................................. 35 Figure 16: Add or Remove Programs confirmation window 8.5.3 .............................................. 35
Table Of Tables
Table 1: CHMI connection for Internet users .............................................................................. 10 Table 2: CHMI online help page for Internet users ..................................................................... 10 Table 3: CHMI connection for SITA users .................................................................................. 11 Table 4: CHMI online help page for SITA users ......................................................................... 11 Table 5: log4j.properties in debug mode .................................................................................... 33 Table 6: log4j.properties in Debug mode.................................................................................... 33
Edition: 8.50
vii
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
1
1.1
(1) (2) (3)
Introduction
Identification
This document forms part of the "CHMI documentation. This document has a document reference of "CHMI/TRD/CHMIaoinst". This document has a Title of "CHMI installation guide version 8.5.3".
1.2
(1)
Scope
This document is made available to technical staff to allow the installation of the CHMI-ATFCM application. As of this CHMI version, CIAM features are also incorporated for AMC users. This software will be used by AO, ANSP and AMC users. Subsequently, the term ATFCM will be dropped from this installation guide. RSA Security has provided an updated version of their RSA Software Token to solve a security issue.
(2)
(3)
2
(1)
User Documentation
Library
http://www.cfmu.eurocontrol.int/cfmu/public/standard_page/library_index.html
Note on the CFMU / Network Manager renaming:
The name of the Central Flow Management Unit (CFMU) is progressively being replaced in EUROCONTROLs publications by the Network Manager (NM). This results from EUROCONTROL's nomination on 1st of September 2011 as the European "Network Manager", as defined in the Single European Sky II (SES) legislation. This does not impact the former CFMU's activities which continue and now form part of the wider scope of the Network Manager's activities. We apologise for the possible inconsistencies that may occur in our documentation updates during the transition period. For more information on EUROCONTROL's organisation and on the mission of the Network Manager, consult the EUROCONTROL website.
3
(1) (2)
Help Desk
If you have any problems, please contact the CSO Help Desk ++ 32 2 745.1997 You may also forward your questions to cfmu.cso.help-desk@eurocontrol.int
Edition: 8.50
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
4
4.1
(1) (2)
PC Hardware prerequisite
Minimum requirements
Memory size: 512 Megabytes RAM Monitor: minimum screen resolution: 1024*768
4.2
(1) (2)
Recommended requirements
2 Gigabytes RAM PC with dual video output: 2 screens are recommended for intensive user of the application (one screen for data input or information display, the second screen to display the map).
5
(1)
Supported platform
English version. Other foreign languages have not been tested. Configure the screen resolution to at least 1024*768 pixels, colour quality with highest 32 bits, DPI setting normal size (96 DPI). CHMI software has been thoroughly tested on Windows XP (Windows 5.1, build 2600 xpsp2: 2.050301-1526 Service Pack 1) English version and with Internet Explorer: 6.0.2800.1106.xpsp2.050301-1526. No known problems have been reported by CHMI customers. Only limited technical support can be provided.
(2)
Windows 7 a) b)
Edition: 8.50
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
6
6.1
(1)
For this release, network parameters have not changed, thus if your current CHMI application (7.5.2) works, you should be able to connect to the new version without any network modification. For internet users, it is assumed that the PC can connect or is ready to connect to the internet. The CHMI via Internet application connects to www.cfmu.eurocontrol.int on ports 80 and 443. Ensure that your PC can resolve the fully qualified domain name of the NM server (www.cfmu.eurocontrol.int). If you have a security device such as firewall (or proxy server), ensure that files with extension TXT, CRC, JAR and BAT are accepted. A CHMI ON-LINE help is also available, at http://www.cfmu.eurocontrol.int/chmi_apphelp/index.html To resume: CHMI SERVER NAME www.cfmu.eurocontrol.int TCP ports Comment 80 & 443 Internet server Table 1: CHMI connection for Internet users
(5)
(6)
(7)
URL=http://www.cfmu.eurocontrol.int/chmi_apphelp/index.html
Table 2: CHMI online help page for Internet users
6.2
(1)
Server consideration
The CHMI also supports Internet Proxy (also called proxy server). If it is the case, you may specify the name and port number of your internet proxy during the installation phase. If you are unsure please contact your network or PC administrator. If CHMI version CHMI 8.0.4 is installed, you may use the same internet proxy value for this release CHMI 8.5.3 Refer to Appendix C to determine which value is currently defined.
(2)
(3)
Edition: 8.50
10
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
7
(1)
For this release, network parameters have not changed, thus if your current CHMI application (8.0.4) works, you should be able to connect to the new version without any network modification. For SITA connected users, it is assumed that the PC is connected and can communicate with the SITA network. The CHMI via Extranet connects to harwbs01.cfmu.eurocontrol.int on ports 80 & 443. Ensure that your PC can resolve the fully qualified domain name of the NM server (harwbs01.cfmu.eurocontrol.int). Ensure that DNS and Firewall are correctly updated to allow CHMI traffic. The ICMP ping command is allowed to reach harwbs01.cfmu.eurocontrol.int. A fallback site (near Paris) is also foreseen for CHMI, the fallback route is brewbs01.cfmu.eurocontrol.int on standard ports (80 & 443). If you have a security device such as firewall or proxy server, ensure that files with extension TXT, CRC, JAR and BAT are accepted. A CHMI ON-LINE help is also available, at http://harwbs01.cfmu.eurocontrol.int/chmi_apphelp/index.html (primary connection) and http://brewbs01.cfmu.eurocontrol.int/chmi_apphelp/index.html (fallback site). To resume: TCP ports
80 & 443 80 & 443
(2)
(3) (4)
(8)
(9)
(10)
SERVERS NAME
harwbs01.cfmu.eurocontrol.int brewbs01.cfmu.eurocontrol.int
Comment
Primary Server for SITA (Pens) users Contingency Server for SITA users
Table 3: CHMI connection for SITA users CHMI ONLINE HELP PAGE
URL=http://harwbs01.cfmu.eurocontrol.int/chmi_apphelp/index.html URL=http://brewbs01.cfmu.eurocontrol.int/chmi_apphelp/index.html
Table 4: CHMI online help page for SITA users
(11)
Contact your network administrator to ensure that your network configuration is correctly implemented. Refer to appendix A (Network troubleshooting) for further information.
Edition: 8.50
11
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
8
8.1
(1) (2)
The CHMI software is stored on the NM FTP server. FTP information : a) b) c) Address (or URL) Username Password : ftp.cfmu.eurocontrol.int : raocop1 : chmi4cfmu : atfcm8.5.3ao.exe
(3)
8.2
(1) (2) (3) (4)
This documentation is available at http://www.cfmu.eurocontrol.int/chmi_appsoft/CHMI/8.5.3/atfcmaoinst8.5.3.pdf The software is available when using the following URL: http://www.cfmu.eurocontrol.int/chmi_appsoft/CHMI/8.5.3/atfcm8.5.3ao.exe
Edition: 8.50
12
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
9
(1) (2) (3)
The software needs to be installed with PC full administrator rights. This software package can be used for Internet connection, SITA connection or both. The software package can be installed with both types of connections (SITA and Internet). This allows some flexibility for network contingency (SITA and Internet) or for performance reasons for some AOs will find that Internet access is faster than SITA Connection. The software package has been validated on Windows XP Service Pack 3. For a new installation, the average size of the application is approximately 85 Mbytes. During the normal operation of the application, the average user data files are approximately 30 Mbytes.
(7)
At each start-up, the CHMI software will check for new software version. Once a new software upgrade is available, it will prompt to download new version. Therefore, it is important to ensure that the location where the CHMI software is stored has sufficient permissions to overwrite its own files. Check that the end-user permissions are suitable to allow files modification (write/modify access) to the default CHMI folders (normally C:\Program Files\Eurocontrol\CFMU Applications\8.5.3). Otherwise, the automatic CHMI upgrade shall fail.
(8)
Edition: 8.50
13
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
10
10.1
(1) (2) (3)
Upgrade information
Migration information
The date of the CHMI migration will be communicated AIM (and NM Portal). Prior to this date, only CHMI-ATFCM 8.0.4 will work correctly. After migration date, only CHMI-ATFCM 8.5.3 will operate correctly. CHMI 8.0.4 will not work anymore. You will be informed by AIM (ATFCM Information message) when the migration is successful. A few days after the migration, you may remove CHMI 8.0.4
(4) (5)
10.2
(1) (2) (3)
If CHMI-ATFCM is already installed, leave the software installed until the migration date. Once, the version 8.5.3 is operational, version 8.0.4 becomes obsolete. Refer Annex D for the removal of this version.
10.3
(1) (2) (3)
It is recommended to install CHMI 8.5.3 as soon as possible. Both versions (8.0.4 and 8.5.3) can be installed on the same PC (no conflict). For testing purposes, after installing the application, launch the application, you should see the CFMU Welcome window. This means that the CHMI is communicating with the NM servers.
Edition: 8.50
14
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
11
11.1
(1)
If you accept all the default settings, the CHMI software will be installed for an Internet Connection. If you want to use this software only for a SITA connection, you will have to choose the Custom installation type and select SITA Connection and unselect Internet connection. Only enter a valid Internet proxy during the installation. In case of doubt, leave the Internet proxy field blank. If you typed in a wrong value, you must uninstall then re-install the application. Ensure that you are installing the software with sufficient privilege (normally administrator rights). Whenever it is possible, we recommend that the default settings are used during the installation phase. This will allow our technical staff to better support the application.
(2)
(3)
(4) (5)
11.2
(1) (2) (3)
During the installation you will be prompted to enter your internet proxy information. The internet proxy information is defined as a system environment variable. To determine the value of the CHMI_PROXYHOST16_5 value, refer to appendix C
Edition: 8.50
15
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Execute the file atfcmi8.0.4ao.exe You will see the Welcome window
If you see another window (Application Maintenance), it means that the software is already installed (refer to appendix C to remove the CHMI software). Click Next button to continue You will be prompted with the license agreement
(4) (5)
Edition: 8.50
16
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
If you accept the license agreement, select I accept the license agreement then click Next to continue
17
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
If you have an Internet Proxy, type in a valid proxy server name and port number separated by a colon (e.g. server_name:1234), then click the next button. If CHMI 8.0.4 is already installed, you may use the same value. Refer to Appendix C to display the internet proxy name and port number. If you are unsure, contact your network administrator. If you are not using the application via Internet, click Next to continue.
(9)
(10) (11)
Edition: 8.50
18
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
You now have the possibility to change the destination folder, however we do not recommend that you change it. If you want to change the destination folder, click on the browse button then chose another folder. By default, the destination folder is : c:\Program Files\Eurocontrol\CFMU Applications\8.5.3 For support reasons and to ease the migration of preferences, we recommend to leave default settings. Click Next button to continue
(13)
(14)
(15)
(16)
Edition: 8.50
19
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
11.3.2.1
(1)
If you need the Internet connection, select the Typical installation, then click Next button to continue. To continue, go to page 11.3.3 (page 23).
11.3.2.2
(1)
If you would like both types of connection, select Complete installation, then click Next button to continue. To continue, go to page 11.3.3 (page 23).
11.3.2.3
(1)
If you only need the SITA connection, select Custom installation, then click Next button to continue. At the Select Features windows, you may choose which feature you want to install.
(2)
Edition: 8.50
20
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
21
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
(4) (5)
You will need to deselect, Internet Connections and Proxy. You will then see the following window
(6)
Edition: 8.50
22
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
After choosing the appropriate feature, the following window will appear:
(2)
Edition: 8.50
23
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
When the installation software is complete, the following screen will appear:
Edition: 8.50
24
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
12
12.1
(1)
If you wish to import, CHMI preferences of the previous version (8.0.4), you need to execute the following script:
The script assumes that the old preference files are located in c:\Program Files\Eurocontrol\CFMU Applications\8.0.4\etc\preferences and that the new version is located in c:\Program Files\Eurocontrol\CFMU Applications\8.5.3\etc\preferences
Edition: 8.50
25
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
13
13.1
(1) (2)
Available shortcuts
Internet Shortcuts
The following Internet shortcuts are available in the start menu: Start/Programs/CFMU Applications/CHMI 8.5.3 via Internet shortcut which is the main shortcut to start the CHMI application. Start/Programs/CFMU Applications/Contingency access/CHMI Reinitialize Map Cache shortcut should be used when instructed by NM technical staff (eg: unable to plot a flight). Start/Programs/CFMU Applications/Contingency access/CHMI Reinitialize All shortcut should be used when instructed by NM technical staff (eg: problems downloading patches).
(3)
(4)
13.2
(1) (2)
Extranet Shortcuts
The following Internet shortcuts are available in the start menu: Start/Programs/CFMU Applications/CHMI 8.5.3 via Extranet shortcut which is the main shortcut to start the CHMI application. Start/Programs/CFMU Applications/Contingency Access/CHMI 8.5.3 via Extranet (contingency) shortcut which is the main shortcut to start the CHMI application. If the Network Manager enters into a contingency situation, the CHMI application is still available but via another remote host site (Paris instead of Brussels).Only use this shortcut when instructed by the NM staff.
(3)
Edition: 8.50
26
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
14
14.1
(1)
Operations
Introduction
After the successful migration of the NM applications, you will be prompted with the CHMI logon window.
14.2
(1)
Internet Connection
To start CHMI 8.5.3, launch the applications from Start/Programs/CFMU Applications/CHMI 8.5.3 via Internet. If you have configured the software with an Internet proxy, you will first be prompted with CFMU authentication for Internet proxy logon screen:
(2)
Enter your Internet Proxy user name and password. If you are unsure, please contact your PC or network administrator. After a successful login, you will be prompted with the CFMU authentication logon screen.
(4)
Edition: 8.50
27
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Figure 11: CHMI ACE logon a) b) c) Enter the CHMI user name assigned by the Network Manager. Enter the passcode generated with the RSA software token tool. For more information, refer to the RSA SecurID Software v4.1.1 - Installation Procedure.pdf document available at
http://www.cfmu.eurocontrol.int/chmi_appsoft/CHMI/Tokens/RSASecurIDSoftwareV4.1.1InstallationProcedure.pdf
Edition: 8.50
28
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Extranet Connection.
To start CHMI 8.5.3, launch the applications from Start/Programs/CFMU Applications/CHMI 8.5.3 via Extranet. After a few seconds, you will be prompted with the CFMU authentication logon screen. If you do not see this window then refers to the Appendix (Network troubleshooting).
(2)
This CHMI logon window requires that you enter your login. a) b) c) Enter the CHMI user name assigned by the Network Manager. Enter the passcode generated with the RSA software token tool. For more information, refer to the RSA SecurID Software v4.1.1 - Installation Procedure.pdf document available at
http://www.cfmu.eurocontrol.int/chmi_appsoft/CHMI/Tokens/RSASecurIDSoftwareV4.1.1InstallationProcedure.pdf
Edition: 8.50
29
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
15
(1)
The RSA Security has released a new version of RSA SecurID Software Token 4.1.1 for Microsoft Windows to solve a security issue. a) b) Refer to https://knowledge.rsasecurity.com/scolcms/set.aspx?id=9147 You will find in Annex F, an extract of the knowledge based information regarding RSA SecurID software token 4.1.0.
The software is available at the RSA website: http://www.rsa.com/node.aspx?id=1162. For your convenience, a copy of the RSA SecurID token V4.1.1 is also available on our web: http://www.cfmu.eurocontrol.int/chmi_appsoft/CHMI/Tokens/RSASecurIDToken411.zip
Edition: 8.50
30
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
APPENDICES
Edition: 8.50
31
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
A
A.1
(1)
Network troubleshooting
CHMI connected to the SITA network
If you get this error message (see below) after starting the application, it means that the CHMI application can not communicate with the CHMI server.
From the PC, perform the following tests Test 1 (to ensure that the PC can resolve correctly IP name resolution) PING harwbs01.cfmu.eurocontrol.int Action: contact your network specialist Test 2 (to ensure that the PC can resolve correctly IP name resolution) PING brewbs01.cfmu.eurocontrol.int Action: Contingency site is only available during disaster recovery operations.
(4)
Edition: 8.50
32
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
B
(1)
If you experience any technical problems with the CHMI (eg network, windows or application problems related to the CHMI application, you might be requested by the NM technical staff to modify the CHMI application to allow recording of all CHMI transactions. At the request of the NM technical staff, edit with notepad application the log4j.properties file (normally located under c:\Program Files\Eurocontrol\CFMU Applications\8.5.3\etc\ directory). At the 18 and 19th lines, you will see: log4j.rootLogger=INFO, DAILY #log4j.rootLogger=DEBUG, DAILY Table 5: log4j.properties in debug mode
(2)
(3)
(4)
(5) (6)
# sign in front of log4j.rootLogger= INFO, DAILY Remove the # sign in front of log4j.rootLogger= DEBUG, DAILY
Add a You will end up with #log4j.rootLogger=INFO, DAILY log4j.rootLogger=DEBUG, DAILY Table 6: log4j.properties in Debug mode
(7) (8)
Then save the file. From now on, every time when you start the CHMI application, every CHMI transaction will be recorded locally in log folder. Normally the log file is located under c:\Program Files\Eurocontrol\CFMU Applications\8.5.3\log\ folder. CHMI logs files are kept 30 days on the PC (file retention date). In order to allow NM technical staff to analyse the problem, you will have to send these log files to the help desk. Do not forget to restore back to the original settings otherwise these log files will grown and will waste valuable disk space on your hard disk.
(9)
(10) (11)
(12)
Edition: 8.50
33
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
C
(1) (2) (3)
Press Start, then choose Run option, type CMD. At the Windows DOS box, type SET CHMI and then press ENTER button It will display a similar window:
In the above example, the CHMI_PROXYHOST_16_0 value is myairlineproxy.com:220562, where myairlineproxy.com is the server name and port number is 123456. For the CHMI 8.5.3, the system variable is now CHMI_PROXYHOST_16.5 Setting up this proxy server is only valid for Internet connection. Contact your Pc or network administrator for more information.
Edition: 8.50
34
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
D
(1) (2)
Ensure that the CHMI application is not running. Press Start/Settings/Control Panel/Add or Remove Programs a) For version 8.0.4 i) ii) To remove the CHMI software, select ATFCM CHMI 8.0.4 and then click on the remove button. After a few seconds, you will see the following window:
Figure 15: Add or Remove Programs confirmation window 8.0.4 iii) iv) b) Choose Yes button. Also remove the folder : c:\Program Files\Eurocontrol\CFMU Applications\8.0.4\
For version 8.5.3 i) ii) To remove the CHMI software, select ATFCM 8.5.3 AO and then click on the remove button. After a few seconds, you will see the following window:
Figure 16: Add or Remove Programs confirmation window 8.5.3 iii) iv) Choose Yes button. Also remove the folder : c:\Program Files\Eurocontrol\CFMU Applications\8.5.3\
Edition: 8.50
35
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
E
(1)
The CHMI QueryReplay Viewer allows to replay particular queries made by some specific users (mainly flow management positions, ciam users). To display data prior to NM/CFMU Release 16 (13/3/2012), you must use a reduced CHMI version called CHMI QueryReplay Viewer. This version is available on all Network Operations Terminals (ANSP desktops, formerly called the CFMU Terminals). An internet version CHMI QueryReplay viewer is also available. For more information, please refer to http://www.cfmu.eurocontrol.int/chmi_apphelp/index.html
(2)
(3)
(4) (5)
Edition: 8.50
36
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
RSA, The Security Division of EMC, announces security fixes and improvements for RSASecurID Software Token 4.1 for MicrosoftWindows: Corrected December 20, 2011 to add additional affected versions Advisories Updated December 20, 2011
Summary: RSA, The Security Division of EMC, announces security fixes and improvements for RSA SecurID Software Token 4.1 for Microsoft Windows This release addresses an Insecure Library Loading vulnerability within RSA SecurID Software Token for Windows (CVE-2011-4141). This release also provides an alternate installation package for customers who do not require the software token automation API features of the product. Further information about these resolutions can be found in the RSA SecurID Software Token 4.1 for Microsoft Windows Release Notes. Platforms: Windows 7 Enterprise SP1 32-bit and 64-bit Windows 7 Professional SP1 32-bit and 64-bit Windows Vista Business SP2 32-bit and 64-bit Windows Vista Enterprise SP2 32-bit and 64-bit Windows XP Professional SP3 Description: This release addresses an Insecure Library Loading vulnerability within RSA SecurID Software Token for Windows (CVE-2011-4141). This vulnerability may be exploited to load arbitrary libraries by tricking a user into opening a Software Token file located on a compromised or malicious share. The software token automation API enables integration with leading VPN and remote access applications so that users are only required to enter their usernames and SecurID PINs for authentication. This release provides an alternative installation package for customers who do not require the software token automation API features. Support for backwards compatibility is provided by a separate installation package that installs the software token automation API. Both versions of the application will be available for direct download from rsa.com.
Edition: 8.50
37
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Further information about these resolutions can be found in the RSA SecurID Software Token 4.1 for Microsoft Windows Release Notes. Affected Products: All versions of RSA SecurID Software Token for Microsoft Windows, including 3.0, 4.0 and 4.1. Recommendation:
RSA strongly recommends that customers upgrade to RSA SecurID Software Token 4.1.1 for Microsoft Windows.
If customers direct their end-users to download the application directly from rsa.com, they should update their instructions to ensure users download the correct version of the application. Common Vulnerability Scoring System (CVSS) Base Score: The Common Vulnerability Scoring System (CVSS) Base Score for CVE-2011-4141 is: 9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C). RSA recommends that all customers take into account both the base score and any relevant temporal and environmental scores, which may impact the potential severity associated with a particular security vulnerability. For more information on CVSS scoring, please see the Knowledge Base Article, Security Advisories Severity Rating at https://knowledge.rsasecurity.com/scolcms/knowledge.aspx?solution=a46604. Credits: RSA would like to thank Parvez Anwar working with Secunia (http://secunia.com) for reporting this issue. Obtaining Documentation: To obtain RSA documentation, log on to RSA SecurCare Online at https://knowledge.rsasecurity.com and click Products in the top navigation menu. Select the specific product whose documentation you want to obtain. Scroll to the section for the product version that you want and click the set link. Obtaining More Information: For more information about RSA SecurID, visit the RSA web site at http://www.rsa.com/node.aspx?id=1156. Getting Support and Service:
Edition: 8.50
38
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
For customers with current maintenance contracts, contact your local RSA Customer Support center with any additional questions regarding this RSA SecurCare Note. For contact telephone numbers or e-mail addresses, log on to RSA SecurCare Online at https://knowledge.rsasecurity.com, click Help & Contact, and then click the Contact Us - Phone tab or the Contact Us - Email tab. General Customer Support Information: http://www.rsa.com/node.aspx?id=1264 RSA SecurCare Online: https://knowledge.rsasecurity.com EOPS Policy: RSA has a defined End of Primary Support policy associated with all major versions. Please refer to the link below for additional details. http://www.rsa.com/node.aspx?id=2575 About RSA SecurCare Notes & Security Advisories Subscription RSA SecurCare Notes & Security Advisories are targeted e-mail messages that RSA sends you based on the RSA product family you currently use. If youd like to stop receiving RSA SecurCare Notes & Security Advisories, or if youd like to change which RSA product family Notes & Security Advisories you currently receive, log on to RSA SecurCare Online at https://knowledge.rsasecurity.com/scolcms/help.aspx?_v=view3. Following the instructions on the page, remove the check mark next to the RSA product family whose Notes & Security Advisories you no longer want to receive. Click the Submit button to save your selection. A communication from the RSA Customer Support
Edition: 8.50
39
Network Manager
Document Title:
EUROCONTROL
Document Reference:
CHMI/TRD/CHMIaoinst
Edition: 8.50
40