CMOS Pro-Forma MOSL CMOS © 2015 CGI Group Inc. – All rights reserved Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 CONTROLLED Information related to aspects of the MOSL CMOS project, intended for distribution either internally in MOSL or externally to MOSL Members or eligible members affiliated to the Ofwat Open Water programme (for the avoidance of doubt organisations who hold a relevant licence to operate with Ofwat). CONTROLLED © 2016 CGI GROUP INC All rights reserved i Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Revision History Version Status Date Description Author 3.0.0.1 Working 16-03-2016 Initial draft – Class 2 S. Hassan 3.0.0.2 Working 17-03-2016 Updated following review by M. Roberts S. Hassan 3.0.0.3 Working 17-03-2016 Updated following review by M. Roberts S. Hassan 3.0.0.4 Working 17-03-2016 Updated following review by M. Roberts and I. Ahmed S. Hassan 3.0.0.5 Working 18-03-2016 Updated following CGI review M. Roberts 3.0.0.5 Working 21-03-2016 Updated following MOSL review M. Roberts 3.1.0.0 Final 21-03-2016 Issued to Market Participants MOSL 3.2.0.0 Final 31-03-2016 Updates following Market Participant comments MOSL CONTROLLED © 2016 CGI GROUP INC All rights reserved ii Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Reviewers Each reviewer acknowledges they have reviewed this document and are in agreement with its content as it relates to their role in the engagement. Name Role Mattijs van den Hoed Design Authority Dale Youngs Security Manager Alexander Boers Environments Manager Mathew Roberts PMO Manager Signature Date Owner The owner is responsible for the creation of this document and acknowledges that this document meets the quality standards and is ready for final signoff. Name Role Tom Webb SIT Analyst Deepak Patel MOSL Data Lead Signature Date CGI Assurance The CGI representative acknowledges that the document meets all the requirements and is accurately and completely fulfills the document objectives as noted in section 1.1, Document Objectives, except as noted and communicated to the Client. Name Role Richard Brown Project Manager Signature Date Client Assurance The Client representative acknowledges that this document accurately fulfills the document objectives as noted in section 1.1Error! Reference source not found., Document Objectives, except as noted and communicated to CGI. Name Role John Briggs Chief Technology Officer CONTROLLED Signature Date © 2016 CGI GROUP INC All rights reserved iii Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Table of contents 1 Introduction_______________________________________________________________________ 1 1.1 Purpose __________________________________________________________________________ 1 1.2 Document references _______________________________________________________________ 1 1.3 Abbreviations _____________________________________________________________________ 1 1.4 Definitions ________________________________________________________________________ 2 1.4.1 Market Participant _________________________________________________________________ 2 2 Process for Enrolment ______________________________________________________________ 3 3 Acquiring Certificates ______________________________________________________________ 4 3.1 Why do we need it _________________________________________________________________ 4 3.2 B2B, CMOS Portal and FTP authentication _____________________________________________ 5 3.3 What is a certificate ________________________________________________________________ 5 3.4 How will Market Participants acquire a certificate _______________________________________ 5 3.5 What does my certificate need to comply to ____________________________________________ 6 3.6 Can I re-use my STS certificates _____________________________________________________ 6 3.8 How many certificates does a Market Participant need? __________________________________ 7 3.9 What do I need to do with my certificates ______________________________________________ 7 3.10 IP address whitelisting ____________________________________________________________ 12 3.11 Who to contact ___________________________________________________________________ 12 4 Procurement Team Master Data _____________________________________________________ 13 4.1 Tariff Data _______________________________________________________________________ 13 4.2 Market Participant details __________________________________________________________ 13 4.3 Contract manager details __________________________________________________________ 15 4.4 System account (Admin user details) ________________________________________________ 16 4.5 Certificate naming convention ______________________________________________________ 16 4.6 IP details ________________________________________________________________________ 18 4.6.1 CMOS Portal and B2B _____________________________________________________________ 19 4.6.2 FTP 19 4.7 Wholesale contract (wholesaler only) – Phase 2 _______________________________________ 19 4.8 Interim supplier opt in/ out – Phase 2 ________________________________________________ 20 4.9 Gap site opt in – Phase 2 ___________________________________________________________ 21 A Appendix A – Pro-forma validation ______________________________________________________ 23 CONTROLLED © 2016 CGI GROUP INC All rights reserved iv Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 1 Introduction 1.1 Purpose The purpose of this document is to provide Market Participants (MP) with an overview of the requirements to access CMOS (Central Market Operating System) on the pre-production environments using digital certificates. It will also provide a template for capturing Master Data from Market Participants. If you have any queries relating to the information provided in this document, or would like someone to provide further guidance please contact [email protected] and one of the System Ready team will be in touch. 1.2 Document references A number of supporting document have been published which work in conjunction to this pro-forma. If you require assistance downloading a copy please contact the MOSL PMO who will be able to support. Reference Document Version Link [1] Certificate Management 0.0.5.1 https://www.mosl.co.uk/events/testspecial-interest-group-8-2-16/ [2] CSD 0208 20150930 http://www.openwater.org.uk/media/1881/32apostvendormap-appendix2-wrcpart-5-csd0208.pdf [3] Market Opening Data Strategy Final https://www.mosl.co.uk/wpcontent/uploads/2016/01/MarketOpening-Data-Strategy-200116FINAL-1.pdf [4] Download Tariff Upload (XSD) 1.0 https://www.mosl.co.uk/events/testspecial-interest-group-1-3-16/ 1.3 Abbreviations Abbreviation Description MP Market Participant SI System Integrator CMOS Core Market Operating System DM Data Migration MOSL Market Operator Services Limited MST Market Scenario Testing SIT System Integration Test UAT User Acceptance Testing STS Sector Test System DL Data Load CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 1 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 LVI Low Volume Interface HVI High Volume Interface CA Certificate Authority 1.4 Definitions 1.4.1 Market Participant For the purpose of this document, a “Market Participant” refers to either a “Wholesale” or “Retail” water company, never to both. A wholesale company and its retail arm are considered two separate market participants. CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 2 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 2 Process for Enrolment The below process flow describes how information will be transferred between companies and the dependencies on all parties. Enrolment Process for Market Participants MOSL Market Participants CGI Review completed pro-forma Issue pro-forma Clarify requirements with MOSL Apply for certificates Complete pro-forma Install certificate Load data into system Whitelist IP Range Connectivity Testing Testing Create Admin Account Note: Any application or connectivity queries should be relayed to the CGI Service Desk, details to be provided by the Service Readiness team at the beginning of April 2016. CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 3 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 3 Acquiring Certificates 3.1 Why do we need it Certificates are used within CMOS to authenticate users when they attempt to access the system. They are used to authenticate both human user access via the CMOS Portal (which provides screens for users to undertake administration, reporting, ad-hoc query and service management functions) and system access via the B2B interface (which provides web services for B2B functions). Certificates are also required for Market Participants to access the FTP (for Data Migration) environment which will allow them to leave their data files for MOSL to upload into CMOS. The FTP environment will also be used to collect Data Upload reports relating to the data files that have been uploaded. The below table shows an overview of each environment and demonstrates where a certificate will be required for those environments. Environment FTP Purpose/ Usage File drop & collection Comments Data files drop and collection of upload reports Full volume data migration environment Data Data upload Market Participant Sandpit (MPS) Market Participant Execution of CMOS transactions Sandpit Market Participant Role FTP Certificate B2B Interface Certificate CMOS Portal Certificate Wholesaler & Market Operator Yes N/A N/A Retailer N/A N/A N/A Market Operator N/A N/A N/A Wholesaler & Retailer N/A Yes Yes Data Validation Sandpit Iterative data uploads; no certificate required for this period as this is MOSLs use Market Operator N/A N/A N/A Market Entry Assurance (MEA) Certificates required for start of MEA Wholesaler & Retailer N/A Yes Yes User Acceptance Testing (UAT)** User acceptance testing Users test the software to make sure it can handle required tasks in the Live Market scenarios, certificate required Wholesaler & Retailer N/A Yes Yes Training Training Certificate not required at this time, subject to change Wholesaler & Retailer N/A N/A N/A Market Sector Testing (MST) CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 4 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 **for the applicable Market Participants Note: Where a Market Participant has no access to a particular environment it is referred to as “N/A” – i.e. it means access is not available. It does not mean that access is available without a certificate. 3.2 B2B, CMOS Portal and FTP authentication For CMOS Portal, validation of the source is established by organisation level certificate. Once the certificates are validated, username and password are used to establish the identity and authenticate the user via Active Directory. For B2B, validation of the identity is established by client certificate which is linked one to one to a Market Participant’s CMOS Organisation ID. The CMOS system retrieves the account on the basis of the certificate identity to authenticate the sender for the B2B. For FTP, validation of the identity is established by client certificate which is linked one to one to a Market Participant’s CMOS Organisation ID. The CMOS system retrieves the account on the basis of the certificate identity to authenticate the sender for the FTP. 3.3 What is a certificate A digital certificate is an online passport which validates a user’s identity, allows a person, system or an organisation to exchange data securely. 3.4 How will Market Participants acquire a certificate All Market Participants will be required to acquire certificates for their, and their System Integrators, own use. A certificate can be purchased from one of the trusted Certificate Authorities (CAs) listed below. Certificate products from each CA which meet MOSL’s defined requirements are also listed below. Certificate Authority Product From their portal select; Entrust Create > SSL/TLS > Standard GlobalSign PersonalSign 2 Pro. (Recommendation from GlobalSign that their ePKI Manager is used which will allow certificate Common Names to be defined) Symantec Corporation Due to issues communicated by the Market Participants MOSL are no longer recommending this Certificate Authority CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 5 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 3.5 What does my certificate need to comply to Certificated purchased by the Market Participants need to be compliant with the following requirements; Issued from a Certificate Authority (CA) as defined in section 3.4 Be compliant with the X.509 standard Must be a Class 2 Client Certificate (a certificate which validates your organisation) Must state “client authentication” in the extended key usage and must not state “server authentication” Must have a validity period of no more than 3 years and not be expired That the certificates “Common Name” is unique for each certificate provided, refer to section 4.5 See section 1.2 and refer to the Certificate Management document for more details. In order for a Market Participant to access the system they must share the Public Key of their certificates with MOSL. This should be sent within this Pro-forma, see section 4.5. Note: The private key associated with any certificate must not be submitted to MOSL within the Proforma, or at any other time. 3.6 Can I re-use my STS certificates If you participated with the Sector Test System (STS) and the certification you provided met the criteria set out in section 3.5 then it is possible to re-use these certificates. If a Market Participant wants to re-use these certificates please update section 4.5 with the certificate information. Note: These certificates will be removed from the STS environment so will no longer be available to use 3.7 What to do with my completed pro-forma All completed pro-formas need to be issued back to MOSL to [email protected]. MOSL have introduced a Participant Validation stage which will require Market Participant CIOs to authorise appointed members of their organisation who have the authority to issue a pro-forma. The validation form can be found in appendix A. Once MOSL are happy with the completed pro-forma they will issue it to CGI who will check that the certificate and user information meets the defined requirements. If your certificate is not valid the Participant will be notified as soon as reasonably possible and a new certificate will be requested. Once a valid certificate is submitted, MOSL will load this against a Market Participants account within the CMOS system and will be used during the logon authentication steps. CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 6 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 3.8 How many certificates does a Market Participant need? The number of certificates required by Market Participants to access the various environments is dependent on their need to meet the requirements set out in section 3.1. Areas of note: CMOS Portal: One client certificate required per MP, per environment which can be replicated and installed across the organisation’s end-user devices. B2B: One client certificate required per MP, per environment e.g. if a Participant is running independent test and development environments then a certificate is required for each FTP: One client certificate required per MP System Integrators: If partnering with an System Integrators they will require their own certification. 3.9 What do I need to do with my certificates Once you have received your certificates they need to be installed on to your local machine or business system. The below screen shots explain where the certificates need to be installed on a local machine, the installation of a certificate within your backend systems for B2B access will differ for each application; 1. Save the certificate to your computer 2. Open the .pfx file 3. When the Certificate Import Wizard loads follow the below steps; CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 7 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Navigate to where the certificate is stored on your local machine Enter the password you have been provided CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 8 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Make sure the certificate is installed in your personal store. CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 9 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Press next. Click Finish. Now open your Browser (Internet Explorer 11 shown as an example) and navigate to the Internet Options > Content > Certificates. You should see the new imported certificate within your Personal Store; CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 10 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Double click the certificate to open it. You will be presented with the certificate. It’s important to notice the key symbol which denotes you have the “private key” installed. CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 11 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 3.10 IP address whitelisting IP addresses and ranges being used to access CMOS and FTP need to be whitelisted. Following submission of this document, IP ranges included in section 4 will be added to the whitelist. It is important to note that if accessing CMOS or FTP through a proxy, the public IP address of the proxy will need to be whitelisted, not the unique IP of the device. 3.11 Who to contact It is recommended that the Market Participant speaks with one of the following members of their business who will be able to provide support in the purchase and installation of the certificates; IT Manager Security Architect/Manager Networking Manage CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 12 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 4 Procurement Team Master Data The following sections provide templates for entering the required details listed below. The templates detail fields that are required or optional and include sample entries in italics and blue text to provide a reference. Master Data provided by each market participant will be pre-loaded into each of the environments from Phase 1 and will consist of: Tariff data Market participants’ organisational details Contact details of the organisation User administrator details Certificate details IP address details The below components of Master Data will be pre-loaded into the CMOS environments from Phase 2 onwards and are provided by the wholesaler only: Wholesale contract Interim supplier opt in/ out Gap site opt in 4.1 Tariff Data Tariff Data is one element of Master Data and includes such data items as: Service Component Tariff Code Effective Dates Charge Elements Tariff Data is expected to be received in XML format and to assist with building this please refer to the Market Opening Data Strategy document ‘Appendix H – Tariffs XML template’ which will show you an example. For the structure and validation rules of the Tariff Data fields please see the XSD on the MOSL website which is located here: https://www.mosl.co.uk/events/test-special-interest-group-1-3-16. For further guidance on how to populate Wholesaler Tariff Data for each of the service components please see Appendix A of CSD 0208. 4.2 Market Participant details Firstly, at a minimum all Market Participants are required to complete the pro-forma. This would allow MOSL to create an ‘Admin’ account for each Market Participant to access CMOS via the Portal for each pre-production environment, which in turn would allow Market Participants to create additional users on CMOS for portal access. CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 13 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Secondly, if Market Participants require access to CMOS via the B2B channel, they will need to provide the appropriate number of certificates for B2B access within the pro-forma. Lastly, only Wholesalers are allowed to access the FTP (Data Upload) environment and similar to B2B, they will need to provide the appropriate number of certificates for FTP access within the pro-forma. Wholesale and Retail companies are treated as separate Market Participants, therefore separate proformas and certificates are required for each wholesale and each retail participant. Please signify in the table below which entity of your business it relates to. Attribute Required Value Notes or sample Organisation name Yes MOSL Wholesale / Retail Yes W or R Water services (yes/no) Yes Yes Sewerage services (yes/no) Yes Yes Secondary Addressable Object No Primary Addressable Object No Address Line 1 (street name) Yes Address Line 2 No Address Line 3 No Address Line 4 No Address Line 5 Yes High Holborn London (City) Postcode Yes WC1V6BX Primary contact first name Yes John Primary contact surname Yes Smith Primary contact ttile (Mr/Mrs/Miss) Yes Mr Primary contact department No Communications Primary contact email address Yes [email protected] CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 14 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Attribute Required Primary contact phone number Yes Trading Party Type (D4014) Yes Value Notes or sample 07778 123456 Supplied by Retailers only: FULL / SELFSUPPLY / TERMINATED Supplied by Wholesalers only: Default Return to Sewer (D7051) Yes 95% Vacancy Charging Method Water Supplied by Wholesalers only: Yes VWA / VWB / VWC (D7052) Vacancy Charging Method Sewerage Supplied by Wholesalers only: Yes VSA / VSB / VSC / VSD / VSE (D7053) Supplied by Wholesalers only: Temporary Disconnection Charging Method Water (D7054) Yes Temporary Disconnection Charging Method Sewerage (D7055) Yes Alternative Tariff Year Start Date No TWA / TWB / TWC Supplied by Wholesalers only: TSA / TSB / TSC / TSD / TSE Supplied by Wholesalers only. Only required if tariff year does not start on the 1st April ddMmm e.g.01Jul 4.3 Contract manager details The role of the Contract Manager has been defined as the primary contact for each of the Market Participants with respect to their interaction with MOSL. Please complete all required fields. Attribute Required Contract manager first name Yes John Contract manager Name Yes Smith Contract manager Title (Mr/Mrs/Miss) Yes Mr Contract manager Email Address Yes [email protected] CONTROLLED Value Notes or sample © 2016 CGI GROUP INC All rights reserved Page 15 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Contract manager Phone Number Yes 07778 123456 Contract manager Department No Communications 4.4 System account (Admin user details) The CMOS system has defined two additional roles covering User and Admin. A User is defined as a member of the Market Participant who will operate the system on a day to day basis. The Admin role will have the same functionality as the User but in addition will be to add and change the profile of existing Users and create new ones via the CMOS Portal. MOSL will assign one Admin user per organisation, it is up to the Admin to create as many users as they require. The details listed in this table will be used for all pre-production environments. Please complete all fields. Role (Admin) Email address Full name Phone number Admin [email protected] John Smith 07778 123456 Admin 4.5 Certificate naming convention An X.509 certificate consists of a number of fields. The subject field identifies the entity associated with the public key stored in the subject public key field. The subject name can be carried in the subject field and/or the Subject Alternative Name extension. The Subject field holds the Distinguished Name (DN) of the client to which the certificate belongs. A DN is a unique name given to an X.500 directory object. It consists of a number of attribute-value pairs called Relative Distinguished Names (RDNs). The relevant RDNs are: CN: CommonName OU: OrganizationalUnit O: Organization L: Locality S: StateOrProvinceName C: CountryName All CMOS certificates (Portal, B2B, FTP) are required to follow the below CommonName naming convention as this forms part of the log in authentication. Naming certificates in this way also makes it easier to identify the MP and the intended use of the certificate. Format: CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 16 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 <Instance>_<Market Participant Name>_<Market Participant Type>_<Access Type>_<Serial> Example 1: MST_MOSL_MO_Portal_1 Example 2: MST_ABC Water_WS_B2B_2 Example 3: FTP_MOSL_MO_FTP_3 Note: Only “Wholesale” Market Participants will be given access to the FTP server, not relevant for Retail. Common name component Description Example 1 Pre-Production Logical Environment or FTP: FTP, or TPS, or <Instance> MST MST, or UAT, or Training Company name of market participant: Wholesale company, or <Market Participant Name> MOSL Retail company, or Market operator WS for Wholesale, or <Market Participant Type> MO RT for Retail, or MO for Market Operator Portal, or <Access Type> Portal B2B, or FTP Certificate Number e.g. <1> for the first certificate, <2> for the 1 second certificate, <3> for the third certificate and so on. This simply refers to nth certificate that has been purchased. <Serial> Please complete certification section of the pro-forma below: Type (CMOS CONTROLLED Environment Certificate name Full name of person Phone number Email address Certificate CER file data in Base-64 format © 2016 CGI GROUP INC All rights reserved Page 17 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Portal, B2B, FTP) responsible for certificate -----BEGIN CERTIFICATE----- CMOS Portal MPS MST_MOSL_ John Smith MO_Portal_1 07778 123456 John.smith@ mosl.co.uk MIICLDCCAZWgAwIBAgIQdBkc6O VPeK9Mot0/VpyZpTANBgkqhkiG9 w0BAQUFADAfMR0wGwYDVQQD ExRtYXR0aWpzIHZhbiBkZW4gaG 9lZDAeFw0xNDEyMzEyMzAwMDB aFw0yMDEyMzEyMzAwMDBaMB8 xHTAbBgNVBAMTFG1hdHRpanM gdmFuIGRlbiBob2VkMIGfMA0GCS qGSIb3DQEBAQUAA4GNADCBiQ KBgQDiVsiw3nccn6rT3cSoS0obxM /tmfHdkwl5HTjGX41QyLgiDyXFXf6 K1xLOoRE7DwDy/ks2Z49RkGzw WJ+UQYEPFY8IBsjEI8FYt+Z4p5O Q+nNkCtSpZrNHcBEhNXpGUOW HwhJim2t1KYv5RyK1ow0CH1DwU iFeq6BHUP+BFhxMzwIDAQABo2k wZzATBgNVHSUEDDAKBggrBgE FBQcDAzBQBgNVHQEESTBHgB CDa8+h7uApcSxOokjje/ieoSEwHz EdMBsGA1UEAxMUbWF0dGlqcyB 2YW4gZGVuIGhvZWSCEHQZHOjl T3ivTKLdP1acmaUwDQYJKoZIhvc NAQEFBQADgYEAG588hhyOKbW VrOhjK+3TifrEopcq1PFCZkS9osE1 OcVXUTOYi9VLbXCnTg4vUgNxjN/ F4wgIf3rnGWm+eDr6fUYLMz0dRw HYmBqne4vo4DoWH1wK1dIY39E UP5CE3LtigBcr+EVHG2IsTgwPEd JoeKVsaA+joeci7yl89VNC5bo= -----END CERTIFICATE----- CMOS Portal B2B FTP 4.6 IP details IP details are required for access to, 1. CMOS on all the pre-production environments via Portal and B2B, and 2. FTP server for data uploads via FTP IP details have been requested separately for both, see below. CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 18 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 4.6.1 CMOS Portal and B2B Required external IP address details for access to CMOS via Portal and B2B, all fields are required. IP address or range Specific - 195.34.200.10 Range – 200.195.64.8 – 200.195.64.29 Specific Range 4.6.2 FTP Required external IP address details for access to FTP server via FTP, all fields are required. IP address or range Specific - 195.34.200.10 Range – 200.195.64.8 – 200.195.64.29 Specific Range 4.7 Wholesale contract (wholesaler only) – Phase 2 The Wholesale contract is a bilateral contract between a Wholesaler and a Retailer to deliver Water or Sewerage services. For every service a separate contract is created by the Wholesaler. The below information is required for the Wholesale contract from the wholesaler: Data Item Description Example Wholesaler ID The ID of the wholesaler, a full list can be found in the Appendix G of the Market Opening Data Strategy SOUTHWEST-W Retailer ID The ID of the retailer, a full list can be found COMMERCIAL-R in the Appendix G of the Market Opening Data Strategy CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 19 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Shows the status of the contract, valid values include: Status ACTIVE ACTIVE NOMORESPID This defines what type of service the contract is for, valid values include: Service WATER WATER SEWAGE Effective from Date The Wholesale contract is current/ongoing as long as the ‘Effective From date’ is today 11/03/2016 or earlier and the ‘Effective To date‘ is empty or lies in the future. Effective to Date The Wholesale contract is current/ongoing as long as the ‘Effective From date’ is today 11/03/2017 or earlier and the ‘Effective To date‘ is empty or lies in the future. 4.8 Interim supplier opt in/ out – Phase 2 To be included in the Interim Supplier Allocation process, the Retailer may choose to Opt In to receive Supply Points from the exiting Retailer. Similarly, a Retailer may choose to Opt Out from the Interim Supplier Allocation process. These options are available to Retailers at any time. For every service a separate agreement is required. The following information from the wholesaler is required for the interim supplier to opt in/ out from the Interim Supplier Allocation process: Data Item Format/ Valid Value Description Example Wholesaler ID Text The ID of the wholesaler, a full list can be found in the Appendix G of the Market Opening Data Strategy SOUTHWEST-W Retailer ID Text The ID of the retailer, a full list can be found in the Appendix G of the Market Opening Data Strategy COMMERCIAL-R CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 20 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Data Item Format/ Valid Value Description OPTIN Retailer has opted in to the Interim Supplier Allocation Process OPTOUT Retailer not opted in of the Interim Supplier Allocation Process INVOLSUS Retailer suspended due to alternative action for insolvency VOLSUS Retailer voluntarily suspended from impending Interim Supplier Allocation Process WATER Water service category SEWERAGE Sewerage service category Effective from Date DD/MM/YYYY Effective From date must be today or after today Effective to Date DD/MM/YYYY End of the opt in period (may not be 01/01/2017 empty). Status Example Service OPTIN WATER 11/03/2016 4.9 Gap site opt in – Phase 2 To be included in the Gap Site Allocation process, the Retailer may choose to Opt In to receive Supply Points with connection type Gap Site. For every service a separate agreement is required. Data Item Format/ Valid Value Description Wholesaler ID Text The ID of the wholesaler, a full list can be found in the Appendix SOUTHWEST-W G of the Market Opening Data Strategy Retailer ID Text The ID of the retailer, a full list can be found in the Appendix G of the Market Opening Data Strategy REQUESTED Opt-in request for an gap site allocation agreement OPTIN Confirmed gap site allocation agreement REJECTED Rejected gap site allocation agreement Status CONTROLLED Example COMMERCIAL-R REQUESTED © 2016 CGI GROUP INC All rights reserved Page 21 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 Data Item Format/ Valid Value Description Example MOSUS Gap site allocation agreement suspended by the Market Operator INVOLSUS Gap site allocation agreement suspended by Market Operator due to alternative action for insolvency WATER Water service category WATER SEWERAGE Sewerage service category SEWERAGE Effective from Date DD/MM/YYYY The Effective From date is prefilled with the date as set by the parameter GAP_SITE_PERIOD_START 01/04/2016 Effective to Date DD/MM/YYYY End of the gap site period 01/04/2017 Service CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 22 of 13 Data Environment Certification Pro-forma Version: 2.0.0.4 Date published: 2016/3/31 A Appendix A – Pro-forma validation CONTROLLED © 2016 CGI GROUP INC All rights reserved Page 23 of 13 CMOS Organisational Validation and Authorised Users Organisational Validation and Authorised Users As part of the Class 2 (Organisationally Validated) certificate process, the identity of the organisation requesting certificates will be validated by the Certificate Authority. This however does not include validating whether the person requesting the certificate and submitting the pro-forma to MOSL is authorised to do so. Validating that the person submitting the pro-forma is authorised to do so will be undertaken by MOSL. MOSL will maintain a list of authorised users. The initial list of authorised users will be submitted by the Chief Information Officer (CIO) on behalf of the organisation using the pro-forma below. The CIO may then choose to delegate authority for informing MOSL of subsequent changes to the list of authorised users. Authorised User pro-forma: Position Name Role Delegated Authority Delegated Authority Authorised Authorised Authorised Please send the completed form to [email protected] Regards MOSL Email Phone
© Copyright 2026 Paperzz