Re: FastLane concerns Robert Meyer 09 Feb 2000 11:45 EST
Here is the notice from NSF. -----Original Message----- From: Miller, Carolyn [mailto:xxxxxx@nsf.gov] Sent: Tuesday, February 08, 2000 10:02 AM Subject: FastLane Conversion from use of PINs to Passwords As mentioned in the Grant Proposal Guide (NSF 00-2, Chapter 1, section C, page 2), NSF is currently in the process of changing our FastLane PI and Organizational Management functions to make use of passwords rather than PINs (this change does NOT affect the Business Office functions). We plan to begin the conversion to passwords within the next two months. We are making these changes for two reasons: * to be consistent with the password conventions that will be used by the Federal Commons project and * to be able to use FastLane passwords as a part of electronic signatures (e.g. proposal certifications page, signatures on revised budgets) so paper copies of these will no longer be required The basic changes you will see with the new password system are: 1) length will be between 6 and 20 characters 2) must contain at least one alphabetic and one numeric character 3) regular expiration of passwords (currently planned for 180 days but may change) 4) passwords cannot be reused for three change cycles 5) individuals will have the ability to change their own passwords 6) if a research administrator changes an individual's password, the individual is required to change the password to something else as a part of the next log-on sequence. I have heard from some that there is concern on your part about the loss of control with this new system (since the individual can/must change his/her own password). I understand this concern, and I am sure you will agree that the implementation of electronic signatures will be worth this small inconvenience. We have worked closely with our lawyers and auditors to be sure that these changes will meet their requirements for the use of electronic signatures in FastLane. In the long-term, we will all benefit from these changes. Once we have finished making our changes and tested them, we will be ready to implement the new password system. We plan to convert the PINs over a thirty day period, based on users' last names. When we have an implementation schedule, I will contact you with more information about the exact implementation schedule and other details. --Carolyn Bob At 09:59 AM 02/09/2000 -0600, you wrote: >It was an email message from FastLane. I didn't save the elctronic copy, >but I'll FAX you the printout. > >************************************************************************** > >Nancy Kay Peterson >Director of Grants & Sponsored Projects >Somsen Hall Room 202-C >Winona State University >Winona, MN 55987 > >Phone: 507.457.5519 >Fax: 507.457.2415 >xxxxxx@winona.msus.edu >http://www.winona.msus.edu/grants/ > > > > William Sharp > <xxxxxx@FALCON.CC. To: xxxxxx@HRINET.ORG > UKANS.EDU> cc: > Sent by: Research Subject: Re: FastLane concerns > Administration > List > <xxxxxx@hrinet.o > rg> > > > 02/09/00 09:22 AM > Please respond to > Research > Administration > Discussion List > > > > > > >Nancy, > >Could you please point us to the location of the recent announcement from >FastLane you reference in your post? Forgive me if this has already been >pointed out and I've just missed it. Thanks! > >Bill Sharp >Contracts Officer >The University of Kansas >Center for Research >2385 Irving Hill Road >Lawrence, Kansas 66044-7552 >(785) 864-7430 >(785) 864-5049 (Fax) >xxxxxx@falcon.cc.ukans.edu > > >At 08:28 AM 2/9/00 -0600, Nancy Peterson wrote: >>The recent announcement from FastLane has obviously raised concerns in the >>SRO community. Much of the concern may be due to the fact that the >>announcement left so many questions unanswered. >> >>1. How will the user registration process work? Will that still be done >>through the SRO Office? >> >>2. If passwords change every 180 days, and a faculty member only writes >>one grant a year (I'm at a primarily teaching institution, not a research >>institution.), the odds are the faculty member will neglect to change the >>password and/or forget it. If they don't change it, will they be kicked >>out of the database? Does that mean they will have to re-register as >>users? >> >>3. If the PI forgets to give the SRO access to the proposal (a common >>mistake), will there be any way the SRO can gain "emergency" access for >>submission purposes? >> >>4. I currently maintain a list of all PINs, because faculty often ask me >>for their PIN number (and some co-PIs, who seldom work on the proposals >>on-line, but must still be registered in the database, have no idea they >>even have a PIN). Could the SRO Office receive notification of password >>changes and passwords? >> >>5. How are you going to secure electronic signatures for institutional >>approvals? I have 6 individuals on campus who are legally authorized to >>sign-off on grant applications. Will each one have to be registered some >>how? Will they have to keep track of changing passwords? (Having >>Presidents and Vice Presidents changing and keeping track of passwords >>is...well...I can't imagine it.) >> >>I have really appreciated the "user-friendly" character of the FastLane >>system. But, the changes proposed as described do appear to be unduly >>cumbersome and problematic. Perhaps responses to the questions above may >>help us better understand how the new system will work. >> >>************************************************************************** >> >>Nancy Kay Peterson >>Director of Grants & Sponsored Projects >>Somsen Hall Room 202-C >>Winona State University >>Winona, MN 55987 >> >>Phone: 507.457.5519 >>Fax: 507.457.2415 >>xxxxxx@winona.msus.edu >>http://www.winona.msus.edu/grants/ >> >> >>====================================================================== >> Instructions on how to use the RESADM-L Mailing List, including >> subscription information and a web-searchable archive, are available >> via our web site at http://www.hrinet.org (click on "Listserv Lists") >>====================================================================== >> > > >====================================================================== > Instructions on how to use the RESADM-L Mailing List, including > subscription information and a web-searchable archive, are available > via our web site at http://www.hrinet.org (click on "Listserv Lists") >====================================================================== > > >====================================================================== > Instructions on how to use the RESADM-L Mailing List, including > subscription information and a web-searchable archive, are available > via our web site at http://www.hrinet.org (click on "Listserv Lists") >====================================================================== > > *********************** Robert C. Meyer Eberly College of Science 513 Thomas Building University Park, PA 16802 Research Office web site: http://www.science.psu.edu/research/funds.htm Phone 814-863-0301 Fax 814-865-3634 ====================================================================== Instructions on how to use the RESADM-L Mailing List, including subscription information and a web-searchable archive, are available via our web site at http://www.hrinet.org (click on "Listserv Lists") ======================================================================