UNCLASSIFIED//
REROUTE DETECTED  
ROUTINE
R 051719Z SEP 14 PSN 430379H26
FM CNO WASHINGTON DC
TO NAVADMIN
BT
UNCLAS

NAVADMIN 206/14

SUBJ/WINDOWS XP ERADICATION EFFORTS//

MSGID/GENADMIN/CNO WASHINGTON DC/N2N6/SEP//

REF/A/MSG/CNO N2N6/091807ZAPR14//
POC/JOE SALAZAR/GS15/OPNAV N2N6BC/-/TEL:  (703) 256-8248/EMAIL:  
joseph.a.salazar1@navy.mil// POC/ANDI ST JOHN/GS13/OPNAV N2N6BC3/-/TEL:  
(571) 256-8512/EMAIL:  andrea.stjohn@navy.mil//
POC/DAN DELGROSSO/GS15/PEO-EIS TD/-/TEL:  (703) 604-4480/EMAIL:  
dan.delgrosso@navy.mil//

NARR/Reference (a) is NAVADMIN 080/14; Navy systems continuing to operate 
with Windows XP or older operating systems.//

RMKS/1.  Reference (a) provided notification indicating Microsoft*s Windows 
XP operating system (WIN XP) has reached end of life and the vendor will no 
longer employ support system upgrades or mitigation of vulnerabilities.  To 
ensure end-to-end cyber security posture and enterprise configuration 
management, Navy will accelerate the process to eradicate the remaining WIN 
XP instances and support a migration effort to Microsoft*s Windows 7 
operating systems (WIN 7).

2.  Navy has entered into a Microsoft Custom Support Agreement (MCSA) to 
provide minimal vulnerability support for the remaining WIN XP currently in 
use across the enterprise.  The MCSA is in effect from
8 April 2014 to 14 April 2015.  MCSA will deliver operational continuity by 
providing security *hotfixes* for WIN XP.  Space and Naval Warfare Systems 
Command (SPAWAR) has established a central repository for downloading 
hotfixes via the SAILOR web portal.  For access to SAILOR contact Elle 
Bergeron, SPAWAR 4.3.3, (619) 221 -7819, or e-mail: 
elle.bergeron@navy.mil.  Navy Cyber Defense Operations Command will 
control notification of security hotfixes and compliance reporting via the 
existing information assurance vulnerability alert process.

3.  Navy is developing a comprehensive migration/eradication plan for both 
ashore and afloat systems.
    a.  Ashore compliance will align with the plan of action and
    milestones (POA&Ms) previously submitted to OPNAV N2N6 by the
    responsible program manager (PM) and Echelon II Command
    Information
   Office (ECH II CIO).  All ashore assets must be WIN 7 compliant
    and
    or compatible by 30 April 2015 or risk disconnect from all Navy
    networks.
    b. Given the complexities associated with the afloat environment,
    WIN XP support will likely be required beyond 14 April
    2015.  Combined Fleet, SYSCOM, PM and Microsoft Eradication Team
    efforts are currently underway for data collection, onsite
    surveys,
    and analysis of the afloat environment, including all non
    -consolidated afloat networks and enterprise services
    platforms.  This analysis will enable development of an
    enterprise
    POA&M to assist in the migration of afloat IT assets to a WIN 7
    or
    greater operating system as quickly as possible.

4.  This evolution requires a commitment from all PMs and ECH II CIOs acting 
as focal points for addressing migration/eradication requirements.  
Cooperation and full disclosure with the contracted Microsoft eradication 
team is essential for this effort to be a success.

5.  Point of contact is Ms. Andrea St. John, OPNAV N2N6BC2 at (571) 256-8512 
or email:  andrea.stjohn@navy.mil.

6.  Released by Vice Admiral Ted N. Branch, OPNAV N2N6.//

BT
#6815
NNNN
UNCLASSIFIED//