| Title: | Mandatory Change for ALL Trade EZVPN Users |
|---|---|
| Date: | 2019-03-27 |
| To: | abi,acep,newace |
| Links: | previous, original, next |
All trade partners using IBM MQ Client are being requested to check their MQ version and install a currently supported version. IBM MQ v9 is preferred.
CBP is implementing a modernized solution for Trade MQ Client Connectivity. The current Cisco Easy VPN Client (EzVPN) solution has been retired, is no longer supported and must be replaced as soon as possible.
A new Infrastructure has being deployed to support the new connectivity option. CBP will provide a package to replace the EzVPN software that will contain the configuration options to be installed.
The current connectivity software will be replaced with a Certificate based connection methodology using IBM MQ Internet Pass-Thru (MQIPT). The MQIPT conversion mandate is not applicable to trade partners currently using the LAN to LAN connectivity option.
The new implementation will allow trade partners with VPN Client connections to securely connect to CBP MQ gateways via encryption public key certificates. The CBP supplied sample program "CBPPTGT" has been enhanced to utilize a Certificate based connection.
The existing settings utilized by this program will continue to work with the updated program. The new MQIPT solution requires a minimum of IBM MQ v8.0. IBM MQ v9.0 is preferred.
This modernized solution has been tested in all applicable CBP environments and is currently in the Production ‘roll-out phase’ to multiple trade partners.
Please answer (to the best of your ability) the following Questionnaire and return to MQ STAFF OPS GML MQSTAFFOPS@cbp.dhs.gov as soon as possible. Additional details are also available via documents from the CBP Middleware MQ Team.
CSMS #19-000165