Applicable Doc. 08 - COTS Product Roadmap.pdf
PDF 366 KB Posted
- Attached to
- DF01--IAM Recompete Task Order (VA-24-00001896)
- Solicitation number
- 36C10B24Q0109
About this file
This document provides a commercial off-the-shelf (COTS) product roadmap for the Identity, Credential and Access Management (ICAM) environment within the Department of Veterans Affairs. It identifies current baseline COTS products from vendors such as IBM, F5 Networks, Microsoft, Red Hat, Splunk, Oracle, and others. For each product, it lists the latest vendor release, end of life dates, and One-VA Technical Reference Model approved versions. Planned upgrades to COTS products are included. Relevant products span shared technologies, VA MPI and Provider technologies, SSOi technologies, CAR technologies, and SSOe technologies. The roadmap aims to inform technical audiences about COTS product compatibilities, risks from unsupported versions, and future capabilities from planned upgrades.
View the file
Other files
Show all 34
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Last modified at 11/2/2023 9:13 AM by DeAntonio, Damien M. (Green Threads) (he/him/his)
IAM Playbook Home
IAM COTS Product Roadmap Purpose The purpose of this playbook is to provide a commercial off-the-shelf (COTS) roadmap that identifies the current baseline of COTS products operating in the IAM environment, identifies the most current versions of each COTS product available, end of life (EOL) dates, and provides a high-level roadmap for COTS product patches and version updates.
Intended Usage and Audience The content provided within this playbook is targeted towards technical audiences with a need to understand the details about the current COTS products and future direction of these products within the IAM environment. This is beneficial for understanding compatibilities between various COTS products both internal to IAM and with integrating partners and systems. Additionally, this document provides insights into future COTS versions that may provide additional capabilities and/or could introduce risks and operational issues if not fully monitored, planned, and properly tested.
Scope This playbook addresses all the major COTS products being used to provide IAM Capabilities.
COTS Product Baseline The tables below (separated by IAM capability) provide information on the current baseline of IAM COTS products, most current production version/release available from the vendor, end of life dates, and One-VA TRM approved versions.
The IAM Product Upgrade Roadmap provides the current plan for all planned product upgrades. This plan is updated regularly based on new product versions, TRM compliance changes and feature needs.
Shared Technologies Products used across many IAM capabilities
Product Current Baseline
Latest Vendor Release
End of Life TRM Approved Version(s)
TRM
Snapshot*
TRM
Link
DataPower XML Security
2018.4.1.9 10.5.x 2018.4 April
2018.4.x Link to image
TRM
link
Page Rating
Categories No categories were selected
IAM Playbooks
COTS Product Roadmap https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/_layouts/listform.aspx?PageType=4&ListId={FC3D90CA-C60C-44F7-9901-1C022384F074}&ID=39 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/IAM%20Playbook%20Home.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/IAM%20Playbook%20Home.aspx https://trm.oit.va.gov/ https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/IAM%20Product%20Upgrade%20Roadmap.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=6377_DP.png http://trm.oit.va.gov/ToolPage.aspx?tid=6377 javascript:;
javascript:;
javascript:;
javascript:;
javascript:;
https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/IAM%20Playbook%20Home.aspx
Gateway Note 5725- T06: Contact your IBM representative for the details of ongoing support for FIPS-reliant DataPower deployments.
(more info)
10.x
F5 BIG-IP
DNS
15.1.6
17 12/11/2024 (more info)
15.1.x (divest)
16.0.x (divest)
17.0.x
Link to image
TRM
link
Java SE 8 15 8 – Dec 2030
11 - Sep
Link to image
TRM
link
Microsoft Internet Information Services (IIS)
(included in Windows Server 2019)
8.5 (divest)
10.0
Link to image
TRM
link
Microsoft Windows Server
2019 2019 2016 - 01/11/2027
2019 - 01/09/2029
2012 R2 (divest)
Link to image
TRM
link
Red Hat Enterprise Linux
7.9 8 7.x – 6/30/2024
7.x (divest)
8.x
Link to image
TRM
link
Splunk Enterprise
9.0.5 9.x N/A 9.x Link to image
TRM
link
Splunk Universal Forwarder
9.0.0 9.x N/A 9.x Link to image
TRM
link https://www.ibm.com/support/pages/ibm-datapower-gateways-firmware-support-lifecycle https://support.f5.com/csp/article/K5903 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=6199_f5.png http://trm.oit.va.gov/ToolPage.aspx?tid=6199 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_StandardPage.aspx_tid=22_java%20se.png http://trm.oit.va.gov/StandardPage.aspx?tid=22# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5108_iis.png http://trm.oit.va.gov/ToolPage.aspx?tid=5108# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=35_win%20server.png http://trm.oit.va.gov/ToolPage.aspx?tid=35# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=6367_RHEL.png http://trm.oit.va.gov/ToolPage.aspx?tid=6367# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=6615_splunk%20enterprise.png http://trm.oit.va.gov/ToolPage.aspx?tid=6615 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=9986_splunk%20fwd.png http://trm.oit.va.gov/ToolPage.aspx?tid=9986
AppDynamics (AppD) agents
23.5 23.x The version number indicates year/month of software release (23.1 = January 2023). End of support for a given release is generally one year after the next release.
For example,
23.1 support ends on February 2024 (as a v23.2 has been released).
23.x Link to image
TRM
link
Ansible 2.9.27 2.13.x N/A 2.9.x (divest) 2.13.x
Link to image
TRM
link
Oracle Database
19.3.0 19.x 19.x - 03/31/2026
19.x Link to image
TRM
link
Oracle Enterprise Manager
13c5 13.5 13c5 – N/A 13.5.x Link to image
TRM
link
VHIC Technologies
Product Current Baseline
Latest Vendor Release
End of Life
TRM
Approved Version(s)
TRM
Snapshot*
TRM
Link
Java JRE 8uXXX
10.x N/A 8uXXX (see
TRM)
9.x (prohibited)
10.x (prohibited)
Link to image
TRM
link
WebLogic Server
12cR2 14c 12cR2 - 10/31/23
12cR2
14c
Link to image
TRM
link https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=6886_appD.png https://trm.oit.va.gov/ToolPage.aspx?tid=6886# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=8196_ansible.png http://trm.oit.va.gov/ToolPage.aspx?tid=8196 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=9_oracleDB.png http://trm.oit.va.gov/ToolPage.aspx?tid=9 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=6533_OEM.png http://trm.oit.va.gov/ToolPage.aspx?tid=6533 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/VHIC/VHIC.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5165_jre.png http://trm.oit.va.gov/ToolPage.aspx?tid=5165# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=7_weblogic.png http://trm.oit.va.gov/ToolPage.aspx?tid=7#
14c – 3/31/28
JasperReports Library
6.19.x
6.20.x N/A 6.19.x
6.20.x
Link to image
TRM
link
Log4j 2.17.1
2.19.x N/A 2.17.x (divest)
2.19.x
Link to image
TRM
link
VA MPI and Prov Technologies Product Current
Baseline Latest
Vendor Release
End of Life
TRM
Approved Version(s)
TRM
Snapshot*
TRM
Link
InfoSphere Master Data Management
(MDM)
11.6
12.0 N/A 11.6 (divest)
12.0.x
Link to image
TRM link
WebLogic Server
11gR1
(PSIM)
12cR2 (TK)
14c 11gR1 - 12/31/21
12cR2 - 10/31/23
14c – 3/31/28
11gR1 (divest)
12cR2
14c
Link to image
TRM link
Websphere Application Server (WAS)
9.0
9.0.0.x N/A 8.5.5.x
9.0.0.x
Link to image
TRM link
Apache Struts
(Toolkit code)
2.5.29 2.5.29 N/A 2.5.29 Link to image
TRM link
Hibernate
ORM
(PSIM and TK code)
3.2 (PSIM)
5.4.x (Toolkit)
5.4 N/A 3.2-5.1
(unapproved)
5.2 (divest)
5.3 (divest)
5.4
Link to image
TRM link https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5171_jasperreports.png http://trm.oit.va.gov/ToolPage.aspx?tid=5171 https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=15_log4j.png http://trm.oit.va.gov/ToolPage.aspx?tid=15# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/VAMPI/VAMPI.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/Prov/Prov.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5815_MDM.png http://trm.oit.va.gov/ToolPage.aspx?tid=5815# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=7_weblogic.png http://trm.oit.va.gov/ToolPage.aspx?tid=7# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=6495_WAS.png http://trm.oit.va.gov/ToolPage.aspx?tid=6495# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=21_struts.png http://trm.oit.va.gov/ToolPage.aspx?tid=21# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=13_hibernate.png http://trm.oit.va.gov/ToolPage.aspx?tid=13#
Log4j 2.17.1 (TK)
2.19.0 (PSIM)
2.19.x N/A 2.17.x (divest)
2.19.x
Link to image
TRM link
Jagacy 3270
(PROV code)
5.4.10
5.4.x N/A 5.4.x Link to image
TRM link
IRIS 2022.x 2020.x
(IRIS)
IRIS 2022.x TRM Link (IRIS)
SSOi Technologies Product Current
Baseline Latest
Vendor Release
End of Life
TRM
Approved Version(s)
TRM
Snapshot*
TRM
Link
Symantec SiteMinder
12.8.06 14.x 12.8.x Link to image
TRM link
Web Access Manager Agent (formerly
CA SSO
Web Agent)
12.52 CR11 12.x N/A 12.x Link to
image
TRM link
CA
Directory/ Symantec Directory
14.1 SP3 14.1 SP3 14.x Link to
image
TRM link
Apache Tomcat
8.5.31 (SSOi App Portal)
8.5.11 (STS)
9.0.12 (ISAR)
10.x N/A 8.5.x
9.x
Link to image
TRM link
Bootstrap 5.2
4.6.2 (Central Login due to SSOi partner applications still using IE mode)
5.2.x N/A 4.6.x (divest)
5.0.x (divest)
5.1.x (divest)
Link to image
TRM link https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=15_log4j.png http://trm.oit.va.gov/ToolPage.aspx?tid=15# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=13162_jagacy.png https://trm.oit.va.gov/ToolPage.aspx?tid=13162# https://trm.oit.va.gov/ToolPage.aspx?tid=14907# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/SSOi/SSOi.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5834_ca%20sso.png http://trm.oit.va.gov/ToolPage.aspx?tid=5834# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=11094_webagent.png http://trm.oit.va.gov/ToolPage.aspx?tid=11094# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5798_CAdirectory.png http://trm.oit.va.gov/ToolPage.aspx?tid=5798# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5451_apache%20tomcat.png http://trm.oit.va.gov/ToolPage.aspx?tid=5451# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=7795_bootstrap.png http://trm.oit.va.gov/ToolPage.aspx?tid=7795#
5.2.x
5.3.x
Spring Framework
5.2.5 6.x more info
5.x
6.x
Link to image
TRM link
Apache
HTTP
Server
2.4.6 (SSOi App Page)
2.4.x N/A 2.4.x Link to image
TRM link
Thymeleaf 3.0.15 3.1.x N/A 3.0.x 3.1.x
Link to image
TRM Link
CAR Technologies Product Current
Baseline Latest
Vendor Release
End of Life
TRM
Approved Version(s)
TRM
Snapshot*
TRM Link
Splunk Enterprise
CAR is built on IAM splunk, see row in shared technologies table for information.
SSOe Technologies
Product Current Baseline
Latest Vendor Release
End of Life
TRM
Approved Version(s)
TRM
Snapshot*
TRM
Link
IBM
Security Verify Access
(ISVA)
10.0.3.1 10.0.x N/A (more info)
10.0.x Link to image
TRM
link
IBM
Security Directory Server
6.4 6.4.x N/A 6.4.x Link to image
TRM
link
Apache Tomcat
9.0.12 (AccessVA)
8.5.24 (SLO)
8.5.11 (Mapper)
8.5.11 (STS)
9.0.12
(ISAR)
10.x N/A 8.5
9.x
Link to image
TRM link https://github.com/spring-projects/spring-framework/wiki/Spring-Framework-Versions https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=12_spring.png http://trm.oit.va.gov/ToolPage.aspx?tid=12# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5009_apache.png http://trm.oit.va.gov/ToolPage.aspx?tid=5009# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=16263_thymeleaf.png https://trm.oit.va.gov/ToolPage.aspx?tid=16263# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/CAR/CAR.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/SSOe/SSOe.aspx https://www.ibm.com/support/pages/ibm-security-verify-access-appliance100x https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5852_ISAM.png http://trm.oit.va.gov/ToolPage.aspx?tid=5852# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=6202_IBM%20directory.png http://trm.oit.va.gov/ToolPage.aspx?tid=6202# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5451_apache%20tomcat.png http://trm.oit.va.gov/ToolPage.aspx?tid=5451#
Apache
HTTP
Server
2.4.6 (AccessVA)
2.4.x N/A 2.4.x Link to image
TRM
link
Spring Framework
5.2.5 6.x more info
5.x
6.x
Link to image
TRM
link
Bootstrap 4.5 5.2.x N/A 4.5.x (divest)
4.6.x
5.0.x (divest)
5.1.x (divest)
5.2.x
Link to image
TRM
link
IBM DB2 n/a n/a N/A n/a (component of IBM Security Directory Server) n/a n/a
AMS/VDT Technologies Product Current
Baseline Latest
Vendor Release
End of Life
TRM
Approved Version(s)
TRM
Snapshot*
TRM Link
WebLogic Server
12cR2 14c 12cR2 - 10/31/23
14c – 3/31/28
12cR2
14c
Link to image
TRM link iText Core 7.2.1 7.2.x N/A 7.2.x Link to image
TRM link
JavaScript N/A
Code reflects what browser supports.
Edition 10 N/A Edition 10 Link to image
TRM link https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=5009_apache.png http://trm.oit.va.gov/ToolPage.aspx?tid=5009# https://github.com/spring-projects/spring-framework/wiki/Spring-Framework-Versions https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=12_spring.png http://trm.oit.va.gov/ToolPage.aspx?tid=12# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=7795_bootstrap.png http://trm.oit.va.gov/ToolPage.aspx?tid=7795# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/AMS/AMS.aspx https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=7_weblogic.png http://trm.oit.va.gov/ToolPage.aspx?tid=7# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_ToolPage.aspx_tid=224_itext.png http://trm.oit.va.gov/ToolPage.aspx?tid=224# https://dvagov.sharepoint.com/sites/OITEPMOIAM/playbooks/Pages/COTS%20Product%20Roadmap/trm.oit.va.gov_StandardPage.aspx_tid=5061_javascript.png http://trm.oit.va.gov/StandardPage.aspx?tid=5061#
*TRM snapshots captured using the following process:
1. Go to TRM link in Google Chrome
2. Ctrl + Shift + I
3. Ctrl + Shift + P
4. Type screenshot
5. Select capture full size screenshot
6. Save resulting .png file
File details come from the government source that posted it. Updated .